Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 9 days ago

Security Trust & Compliance Analyst

Hi Marley10 open roles

Pay
$75,600 – $118,800 a year
Where
Hybrid - Boston, MA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Trust & Compliance AnalystHi Marley · Hybrid - Boston, MA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Hi Marley's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Hi Marley postings stay open a median of 49 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 9 days ago

Hi Marley median: 49 days open

The posting

Insurance touches people during some of the most challenging moments in their lives. Hi Marley is on a mission to transform how the P&C industry communicates, making those moments faster, easier, and more empathetic for carriers and the customers they serve. We build AI-powered software that keeps everyone in the claims conversation informed and connected. If you believe insurance can combine operational excellence and automation with a human touch, we’d love to meet you.

We are looking for a Security Trust & Compliance Analyst to be the person our customers and auditors rely on for accurate answers about how Hi Marley protects their data. You will learn our products and how we run them, answer security questionnaires, RFPs and due-diligence requests from insurance carriers, work with our auditors on SOC 2 and ISO evidence, and help keep our policies in step with what the market expects. This is an individual contributor role, reporting to the Director, Security, for someone who has done this work before and is ready to own a large share of it.

What You’ll Do:

  • Product & Operations Knowledge: Learn how Hi Marley builds and ships software, runs AWS infrastructure, implements AI features, and operates its control environment, well enough to explain each accurately to our customers’ security, privacy, and compliance teams. Build working relationships with Product, Engineering, DevOps, and Security so you know whom to ask and notice when an answer has changed.
  • Customer Trust & Due Diligence: Own carrier security reviews of Hi Marley, including questionnaires, third-party risk assessments, and follow-up requests, for new deals and renewals. Support Sales on the security sections of RFPs. Keep our answer library accurate and current and bring anything novel, such as new commitments, contract language, or control gaps, to Security and Legal for review.
  • AI Governance & AI Due Diligence: Answer carrier questions about how Hi Marley uses AI, including which features rely on it, which third-party providers process data, how models are monitored and changed, and how customer data is handled throughout. Help build and maintain the evidence behind our AI governance program, aligned to ISO/IEC 42001 or the NIST AI RMF.
  • Audit Support & Evidence Management: Be the day-to-day contact for our SOC 2 Type II and ISO auditors. Plan evidence requests, collect and organize evidence from control owners, interpret auditor requests and findings for the teams involved, and track remediation to closure.
  • Policy & Control Development: Help maintain our information security, privacy, and AI policies so they hold up in SOC 2 examinations and ISO/IEC 42001 audits and match what carriers expect in contracts and questionnaires. Draft practical standards and guidelines, for Security leadership approval, that internal teams can follow day to day. Spot where documented practice and actual practice differ, and work with control owners to close the gap.

What We’re Looking For:

Required skills & experience

  • 3–5 years of experience in security compliance, GRC, IT audit, or customer security assurance, ideally at a B2B SaaS company.
  • Hands-on experience completing security questionnaires (SIG, CAIQ, and custom customer questionnaires) and the security sections of RFPs.
  • Direct experience supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs.
  • Working knowledge of ISO/IEC 27001 or another management system standard, including how it is structured and audited.
  • Enough technical understanding of cloud infrastructure (AWS), identity and access management, encryption, and the software development lifecycle to discuss them with engineers and explain them to non-technical readers.
  • Clear, precise writing. You can describe a control in plain language without overstating it.
  • Organized and comfortable running many requests against deadlines, working across Sales, Legal, Product, and Engineering.

Nice-to-haves

  • Experience in insurance, financial services, or another regulated industry, including familiarity with NY DFS Part 500, the NAIC Insurance Data Security Model Law, or the NAIC Model Bulletin on the use of AI by insurers.
  • Exposure to ISO/IEC 42001, the NIST AI Risk Management Framework, or other AI governance frameworks.
  • Experience maintaining a risk register or a customer-facing trust center (e.g., Vanta, Drata, SafeBase, Loopio, Conveyor).
  • Experience using AI tools to draft, check, and maintain questionnaire responses.
  • Familiarity with privacy requirements and data processing agreements (e.g., CCPA/CPRA, PIPEDA).
  • Relevant certifications, such as CISA, CISSP, CISM, or CRISC.

Compensation, Benefits & Perks: At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of $75,600 – $118,800, depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity.

In addition to base pay, we offer a comprehensive total rewards package that supports both your wellbeing and professional growth, including:

  • Equity grants for all employees
  • A 4% matching 401(k) program
  • Medical, dental, vision, disability, and life insurance coverage for employees working 30+ hours per week
  • Monthly wellness stipend
  • Paid parental leave
  • A flexible vacation policy - we all work hard and take time when we need it

Who We Are: At Hi Marley, our culture is built on three core values that every employee embodies:

  • Max Courage – We encourage our team, our customers, and their customers to dream big, try new ideas, and maximize impact by measuring risk.
  • Be Humble – We lead with appreciation and promote a culture of humility, compassion, and openness to learn from anyone, anywhere.
  • Ubuntu (“I am because we are”) – We believe true success is much bigger than any single individual or company. By aligning our individual aims behind a shared purpose, we can achieve our fullest potential — together.

Life at Hi Marley:

Life at Hi Marley is shaped by collaboration, learning, and genuine connection. We’re proud to foster an environment where people can do their best work, feel supported, and grow alongside a team that celebrates both individuality and shared purpose.

  • A fun, lively startup culture that embraces creativity and innovation
  • Core values-based leadership that guides our decision-making and daily interactions
  • A culture of engagement, diversity, inclusion, and belonging — everyone’s voice matters
  • Flexible, hybrid work environment that values balance and trust
  • Ample opportunities to learn, take on new challenges, and make an impact in a fast-growing organization
  • Meaningful work that directly supports our mission to help people and organizations communicate with empathy and clarity

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.

Hi Marley participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. For more information, please review the documents under "E-Verify Poster" here: https://e-verify.uscis.gov/web/OnlineResources.aspx

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Hi Marley's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Hi Marley's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Hi Marley's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.