The Role
The GRC Analyst supports the GRC program, assisting in policy development, risk assessments, compliance monitoring, and audit coordination.
Summary Generated by Built In
At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.
As a GRC Analyst, you will play a crucial role in supporting the development, implementation, and maintenance of our Governance, Risk, and Compliance (GRC) program. Working under the guidance of the GRC Senior Manager you will assist in various activities, including policy development, risk assessments, compliance framework implementation and monitoring, and audit coordination. Step into a role that empowers you to build a well-rounded foundation in GRC, explore multiple facets of the field, and sharpen your skills in specialized areas such as risk management or standards program management. Your sharp eye for detail and strong analytical mindset will play a pivotal role in strengthening our security and compliance initiatives.
RESPONSIBILITES:
- Assist in the development and implementation of the GRC framework to support business objectives, aligned with industry best practices and regulatory requirements.
- Assist in conducting risk assessments, supporting the development and adherence of risk mitigation strategies, and maintaining the risk register.
- Support ongoing compliance monitoring activities to ensure adherence to internal policies, relevant regulations, standards, and contractual obligations.
- Assist in evaluating and managing risks associated with third-party vendors and service providers through vendor risk assessment processes.
- Provide support in incident response activities, including documentation, coordination, and post-incident analysis as directed.
- Assist in the development and delivery of security awareness and training programs to educate employees on security policies, procedures, and best practices.
- Support audit activities by gathering evidence, conducting preliminary assessments, and assisting in the remediation of audit findings.
- Manage and resolve GRC support tickets promptly and efficiently.
- Participate in the review, development, and maintenance of security policies, standards, and procedures to ensure compliance with regulatory mandates and industry standards.
- Maintain and update GRC standard operating procedures to ensure consistency and efficiency. Identify areas for process improvement within the GRC program and assist in implementing enhancements to improve effectiveness and efficiency.
QUALIFICATIONS:
- Bachelor's degree in Information Security, Computer Science, or relevant certifications (e.g., CompTIA Security+, CISSP, CISA, CISM, GRC certifications) a plus.
- Minimum of 2 years of experience in information security, risk management, audit, or compliance roles.
- Strong understanding of GRC concepts, principles, and practices.
- Familiarity with relevant regulations, standards, and frameworks (e.g., GDPR, SOC2, ISO 27001, NIST Cybersecurity Framework).
- Excellent analytical and problem-solving skills with attention to detail.
- Effective communication and interpersonal skills, with the ability to establish relationships and collaborate with cross-functional teams.
- Detail-oriented with superior organizational and time-management skills - balancing multiple projects, deadlines, and requests.
- Proven ability to navigate ambiguity and complexity, turning uncertainty into clarity and actionable insights.
- Driven with a pro-active and results-oriented approach, demonstrating a can-do attitude and determination to succeed.
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Top Skills
Compliance
Gdpr
Grc Frameworks
Iso 27001
Nist Cybersecurity Framework
Risk Management
Soc2
What the Team is Saying
Anahis
Staff Tech Lead - Mechanical Engineering
Josh
Lead Designer
Manan Dedhia
Field Quality Manager
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
At WHOOP, we’re on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. Our wearable device and performance optimization platform has been adopted by many of the world's greatest athletes and consumers alike.
Why Work With Us
At WHOOP, we’re focused on building an inclusive and equitable team with a strong sense of belonging for everyone—increasing representation in every way as our team grows. We believe that our differences are our source of strength—so much so it’s one of our core values.
Gallery
WHOOP Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site:
Not Specified
