Insurance plays an important role in people’s lives, providing protection and peace of mind through life’s adventures and unexpected turns. In the moments that matter, people want to know their insurer is there for them. At Hi Marley, we help insurers deliver on that promise through communication that brings greater clarity and connection to the policyholder experience.
When an insurance carrier asks how Hi Marley protects their data, you'll be the person with the answer, and the person who makes sure it's accurate. You'll learn our products, AWS infrastructure, and AI features well enough to explain them to customers' security teams, own carrier security reviews, and be the day-to-day contact for our SOC 2 and ISO auditors. This is an individual contributor role for someone who has done this work before and is ready to own a big share of it. If you like describing a control in plain language without overstating it, you'll love this role.
We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote.
What You'll Do- Own carrier security reviews for new deals and renewals, from questionnaires and risk assessments to the security sections of RFPs
- Answer carrier questions about how we use AI, and help build the evidence behind our AI governance program
- Run day-to-day audit support for SOC 2 Type II and ISO, from evidence requests through tracking findings to closure
- Keep our security, privacy, and AI policies current, and close the gaps between what's documented and what teams actually do
- 3–5 years in security compliance, GRC, IT audit, or customer security assurance
- Hands-on experience completing SIG, CAIQ, and custom questionnaires, and supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs
- Working knowledge of ISO/IEC 27001 or a similar standard, and enough technical depth in cloud, identity, and encryption to talk with engineers
- Clear, precise writing, the organization to run many requests against deadlines, and able to work from our Boston office 3 days a week
- Experience in insurance or another regulated industry, including NY DFS Part 500 or NAIC rules
- Exposure to ISO/IEC 42001 or the NIST AI RMF
- A CISA, CISSP, CISM, or CRISC certification
Don't check every box? If this role excites you, we'd still love to hear from you.
Compensation, Benefits & Perks
At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of $75,600 – $118,800, depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity.
In addition to base pay, we support your wellbeing and growth with:
- Equity grants for all employees
- 401(k) with a 4% employer match
- Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week
- Monthly wellness and annual professional development stipends
- Paid parental leave
- Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown
Who We Are:
Three core values guide how we work:
- Max Courage: Dream big, try new ideas, and take measured risks to maximize impact.
- Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere.
- Ubuntu: Align behind a shared purpose to achieve our fullest potential together.
Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support—both at work and when life needs our attention.
Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.
Skills Required
- 3-5 years of experience in security compliance, GRC, IT audit, or customer security assurance, ideally at a B2B SaaS company
- Hands-on experience completing SIG, CAIQ, and custom customer security questionnaires and security sections of RFPs
- Direct experience supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs
- Working knowledge of ISO/IEC 27001 or another management system standard, including its structure and audit process
- Technical understanding of cloud infrastructure, AWS, identity and access management, encryption, and the software development lifecycle
- Clear, precise writing and ability to describe controls in plain language without overstating them
- Strong organization and ability to manage multiple requests against deadlines across Sales, Legal, Product, and Engineering
- Experience in insurance, financial services, or another regulated industry
- Familiarity with NY DFS Part 500, the NAIC Insurance Data Security Model Law, or the NAIC Model Bulletin on AI use by insurers
- Exposure to ISO/IEC 42001, the NIST AI Risk Management Framework, or other AI governance frameworks
- Experience maintaining a risk register or customer-facing trust center
- Experience using AI tools to draft, check, and maintain questionnaire responses
- Familiarity with privacy requirements and data processing agreements, including CCPA/CPRA and PIPEDA
- Relevant certification such as CISA, CISSP, CISM, or CRISC
What the Team is Saying
Hi Marley Compensation & Benefits Highlights
-
Healthcare Strength — Coverage begins on day one and includes medical, dental, and vision with HSA/FSA options, plus mental-health resources. Inclusive care such as fertility benefits, transgender health care, and abortion travel benefits further expand breadth.
-
Parental & Family Support — Paid parental leave is described as up to 14 weeks at 100% base pay for birth parents and six weeks for adoption, foster care, or bonding. Return-to-work support and family-friendly resources are also highlighted.
-
Retirement Support — A 401(k) program with a 100% employer match on the first 4% of compensation and immediate vesting is cited across listings. This structure strengthens long-term savings for employees.
Hi Marley Insights
What We Do
Hi Marley is the Intelligent Communication Platform for P&C Insurance. Founded in 2017 and headquartered in Boston, Hi Marley helps carriers deliver better insurance experiences through communication that is simple, connected, and built for the way P&C teams work. Trusted by more than 130 carriers, including 4 of the top 10, Hi Marley connects carriers and the insurance ecosystem in a single conversation, applying AI responsibly to reduce friction, move work forward, and support policyholders when it matters most
Why Work With Us
Our team is made up of people who care about each other and are passionate about what we do in and outside of work. We promote a culture of continuous learning, always seeking ways to be better for ourselves, our team and our customers. Creativity is encouraged and valued throughout the company and is paramount to our innovation.
Gallery
.jpg)
Hi Marley Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We thrive on teamwork and shared enthusiasm, which is why we are in the office for two days each week.
