Whoop
Manager, Governance Risk & Compliance (GRC)
$155K–$195K
Boston, MA · On-site · Manager · Full-time · Posted Sep 8, 2026
- Experience
- 8+ years overall, with 2+ years leading or managing GRC, information security, or audit professionals.
- Education
- Minimum bachelor’s degree in any discipline.
- Visa sponsorship
- Participates in E-Verify to determine employment eligibility.
About the job
Leads WHOOP’s day-to-day GRC operations, managing risk and compliance assessments, third-party reviews, and cross-functional initiatives to reduce risk and strengthen security and resilience.
What you'll do
- Lead GRC operations, intake and assessment prioritization, and team workload management.
- Oversee vendor risk assessments, enterprise risk reviews, and maintenance of the enterprise risk register.
- Manage policy and control activities, audit support, compliance metrics, and incident-related risk tracking.
What they ask for
- 8+ years of experience in GRC, information security, or cybersecurity, including 2+ years leading or managing GRC, information security, or audit professionals.
- Experience leading operational GRC programs, including intake management, workload prioritization, KPI reporting, and cross-functional coordination.
- Hands-on experience with vendor risk assessments, security reviews, due diligence, and risk-based decision support; knowledge of SSDLC risk assessments and application security governance.
- Knowledge of ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, and PCI DSS; minimum bachelor’s degree in any discipline.
Nice to have
- Computer science, cybersecurity, or risk or technology degrees.
- CISSP, CRISC, CISA, or ISO 27001 Lead Auditor certification; background establishing SSDLC guardrails.
Pay
$155,000-$195,000 USD base salary
Tools
ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS
Model-written summary · the original posting is authoritative