Security Trust & Compliance Specialist

Hi Marley; Boston (MA); On-site; USD 110,000 - 160,000; Full time

Job summary

Hi Marley is seeking a Security Trust & Compliance Analyst to own customer security reviews, respond to questionnaires and RFPs, and coordinate with auditors on SOC 2 Type II and ISO 27001 evidence. You will work across product, engineering, and legal to keep controls aligned with market expectations.

You will document AI governance and due diligence evidence, maintain our evidence library, and help ensure privacy and data protection across SaaS operations for insurers and customers.

Qualifications

• ISO/IEC 27001 knowledge, structure and audit experience.
• Experience with security questionnaires and RFPs.
• 3–5 years in security compliance, GRC, IT audit, or customer security assurance.
• Ability to discuss AWS, IAM, encryption, and SDLC with engineers.

Responsibilities

• Own carrier security reviews including questionnaires and third-party risk assessments.
• Support Sales on security sections of RFPs.
• Keep answer library accurate and current; escalate novel commitments for review.
• Help build and maintain AI governance and related evidence.
• Be day-to-day contact for SOC 2 Type II and ISO auditors; plan evidence requests.
• Draft and maintain information security, privacy, and AI policies; close gaps with control owners.

Skills

ISO/IEC 27001 knowledge

Cross-functional coordination

Security questionnaires

Security compliance experience

Cloud security fundamentals

SOC 2 support

Technical writing

Regulated industry experience

AI governance frameworks

Risk/trust center familiarity

Privacy laws familiarity

AI drafting assistance

Certifications (CISA/CISSP/CISM/CRISC)

Tools

Vanta

Drata

SafeBase

Loopio

Conveyor

Job description

Hi Marley is seeking a Security Trust & Compliance Analyst to own customer security reviews, respond to questionnaires and RFPs, and coordinate with auditors on SOC 2 Type II and ISO 27001 evidence. You will work across product, engineering, and legal to keep controls aligned with market expectations.

You will document AI governance and due diligence evidence, maintain our evidence library, and help ensure privacy and data protection across SaaS operations for insurers and customers.