Senior Security and Compliance Analyst

Insurify; Cambridge (MA); On-site; USD 110,000 - 115,000; Full time

Benefits offered by this job

Competitive compensation

Generous stock options

Health, Dental Coverages

401K plan with match

Unlimited PTO

Paid Family Leave

Catered lunches in the office

Job summary

A leading MIT FinTech startup is looking for a Senior Security and Compliance Analyst to design and enforce security controls to protect systems and data, ensuring compliance with regulations. This hybrid role involves conducting risk assessments, implementing security best practices, and collaborating across the organization. The ideal candidate will have a degree in computer science and expertise in enterprise IT and security frameworks. Competitive compensation is offered, with a salary range of $110,000-$115,000.

Qualifications

• 3+ years of relevant experience.
• Working knowledge of security frameworks for risk and capability mapping.
• Ability to conduct risk assessments and vulnerability analyses.

Responsibilities

• Align security practices with regulations and internal policies.
• Conduct risk assessments and threat evaluations.
• Implement and validate security controls to reduce risks.

Skills

Expertise with enterprise IT

Cloud infrastructure

Core security tools

Understanding of data privacy laws

Clear communication skills

Education

Associate's or bachelor's degree in computer science or a related field

Tools

NIST CSF

PCI

Job description

Warning: Fraudulent Job Adverts. Beware of fraudulent activities claiming to represent Insurify. We are not associated with any entities soliciting personal information or payment. The safety of our job seekers is a top priority, and we actively work to prevent such incidents. Insurify will never request sensitive information or payment during the hiring process. Be cautious of text-only interviews, interviews conducted through Microsoft Teams, or suspicious offer letters.

Why us? Insurify is one of America's fastest-growing MIT FinTech startups and has been recognized as one of Inc. 5,000's fastest-growing private companies in America in 2025, 2024, 2023, 2022 and 2021, Forbes Fintech 50 List for 2023, 2022, and 2021, Forbes Next Billion Dollar Startups of 2022 global and Top 100 InsurTech company. We\'re changing the way millions of people compare, buy and manage insurance with artificial intelligence, technology, and superior product design. Our company vision is to be recognized as the preeminent and most trusted digital agent for insurance comparison, purchase, and management. Our team is critical to achieving our vision and fostering the right culture is essential to our team\'s success.

Join us if you like

• $1.3 Trillion market opportunity
• MIT alumni founders
• Female-led startup
• $130M total funding
• Strong leadership team with experience from many successful startups around the world

Insurify is hiring a Senior Security and Compliance Analyst to help design and enforce security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards. This role will be working cross functionally across the org on long-term projects as Insurify continues to scale.

This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office.

How you will make an impact

• Align security practices with external regulations, internal policies, and security frameworks (e.g., NIST CSF, PCI).
• Conduct risk assessments and threat/vulnerability analyses across systems and networks.
• Recommend, implement, and validate security controls and best practices to reduce risk.
• Continuously monitor systems for threats and validate the effectiveness of implemented controls.
• Develop, maintain, and socialize security policies, standards, and procedures.
• Develop incident response planning and manage post-incident reviews.
• Maintain the security and compliance automation platform.
• Monitor evolving threats, regulations, and industry trends to continually enhance the security program.
• Present findings and recommendations to technical and executive stakeholders.

Who you are

• Associate\'s or bachelor\'s degree in computer science or a related field.
• 3+ years of relevant experience.
• Expertise with enterprise IT, cloud infrastructure, common threats, and core security tools.
• Working knowledge of frameworks such as NIST CSF and PCI for risk and capability mapping.
• Understanding of data privacy laws and industry-specific regulations.
• Clear, concise communication of complex technical risk to both technical and executive audiences.

Benefits

• Competitive compensation
• Generous stock options
• Health, Dental Coverages
• 401K plan with match
• Unlimited PTO
• Generous company holiday calendar
• Learning & Development Stipends
• Paid Family Leave
• Social impact volunteer time
• Catered lunches in the office

Insurify is committed to offering a fair, competitive, and transparent compensation program that supports our mission to attract, retain, and motivate top talent. Our compensation philosophy is guided by several factors including a candidate\'s relevant experience, education/training, job-related skills, and location.

In addition to the base salary our total compensation package includes health coverage, retirement contributions, and additional wellbeing benefits. Some positions may be eligible for company equity.

Below is the base compensation range for US locations:

$110,000-$115,000

We are proud to be an Equal Employment Opportunity and Affirmative Action employer.