Director of Security

We’re looking for a Director of Security to lead and scale our security program as we grow our SaaS platform in the insurance and communications space. You’ll own the full lifecycle of security and compliance initiatives, from policy design and audits to security operations and vendor management. This is a strategic and executional role, blending hands-on implementation with leadership across the organization. You will serve as the primary point of accountability for information security, data protection, and compliance readiness, especially in regulated environments such as Tier 1 insurance carriers. 

Teamwork and shared enthusiasm is a core part of our culture, which is why this role involves joining us in the Boston office for two days each week

What You’ll Do: 

• Lead Hi Marley’s security program across infrastructure, product, data, and personnel.
• Ensure compliance with enterprise-grade insurance industry security requirements and frameworks (specifically SOC 2 and ISO 27001 or ISO 42001).
• Build and maintain core security documentation, policies, and playbooks.
• Lead efforts to achieve and maintain certifications, including ISO 42001 and SOC 2 Type II.
• Partner with Legal, Sales, and Customer Success to review contracts, DPAs, and security exhibits.
• Own vendor security assessments and manage responses to customer security questionnaires.
• Build scalable, self-service tools and knowledge bases to streamline security-related workflows.
• Oversee incident response planning, tabletop exercises, and disaster recovery validation.
• Implement security controls across cloud infrastructure (AWS), applications, and endpoints.
• Collaborate with Engineering and DevOps to embed security into SDLC, CI/CD pipelines, and production systems.
• Track and report key risk and compliance metrics.
• Ensure that security controls uphold “Privacy by Design” principles 

What We're Looking For: 

• 7+ years in cybersecurity, risk management, or information security roles, with at least 3 years in a leadership or ownership position.
• At least 5 years of insurtech or fintech experience
• Experience in high-growth, cloud-native environments (AWS preferred).
• Deep familiarity with ISO 27001, SOC 2, and ideally ISO 42001 frameworks.
• Strong understanding of data protection laws and practices (e.g., CCPA, GDPR, GLBA).
• Exceptional written and verbal communication skills—especially in creating clear, audit-ready documentation.
• Track record of working cross-functionally with Legal, Engineering, and Customer teams.
• Passion for operational efficiency and automating repetitive security work.
• Comfortable balancing pragmatic risk management with enterprise-class expectations.
• Committed to ethical practices, transparency, and long-term trust-building