AI Governance & Security Compliance Analyst

Hi Marley; Boston (MA); Hybrid; USD 76,000 - 119,000; Full time

Benefits offered by this job

Equity grants

401(k) matching

Medical, dental, vision coverage

Wellness stipend

Paid parental leave

Flexible vacation policy

Job summary

Hi Marley is seeking a Security Trust & Compliance Analyst in a hybrid Boston-area role. You will manage security questionnaires, RFP responses, and audit evidence, with emphasis on SOC 2 Type II and ISO 42001 alignment. You’ll collaborate with Product, Engineering, DevOps, Legal, and Security to keep control documentation current.

You’ll review AI governance, data handling, and vendor risk while supporting carrier security reviews and due diligence for renewals and new deals.

Qualifications

• 3–5 years of experience in security compliance, GRC, IT audit, or customer security assurance.
• Experience completing security questionnaires (SIG, CAIQ, and custom customer questionnaires) and RFP security sections.
• Direct experience supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs.
• Working knowledge of ISO/IEC 27001 or another management system standard and its audits.
• Technical understanding of cloud infrastructure (AWS) and encryption to discuss with engineers.
• Strong written communication and ability to describe controls clearly.
• Organized with ability to manage many requests across Sales, Legal, Product, and Engineering.

Responsibilities

• Learn Hi Marley software, AWS infrastructure, AI features, and control environment to explain to security, privacy, and compliance teams.
• Own carrier security reviews, questionnaires, third‑party risk assessments, and follow‑ups for new deals and renewals.
• Support Sales on security sections of RFPs and keep the answer library current and accurate.
• Provide guidance on AI governance, data handling, third‑party providers, and model monitoring.
• Assist SOC 2 Type II and ISO auditors, plan evidence requests, collect evidence, and track remediation.

Skills

Security compliance

GRC

IT audit

Customer security assurance

Questionnaire familiarity

SOC 2 Type II support

Tools

ISO/IEC 27001

ISO/IEC 42001

NIST RMF

AWS

Job description

Hi Marley is seeking a Security Trust & Compliance Analyst in a hybrid Boston-area role. You will manage security questionnaires, RFP responses, and audit evidence, with emphasis on SOC 2 Type II and ISO 42001 alignment. You’ll collaborate with Product, Engineering, DevOps, Legal, and Security to keep control documentation current.

You’ll review AI governance, data handling, and vendor risk while supporting carrier security reviews and due diligence for renewals and new deals.