Whoop
Senior Manager: Governance, Risk, & Compliance (GRC)
$185K–$205K
Boston, MA · On-site · Manager · Full-time · Posted Sep 8, 2026
- Experience
- 10+ years in GRC or information security/cybersecurity, with 5+ years managing GRC, information security, or cybersecurity professionals.
- Education
- Minimum bachelor’s degree in any discipline; computer science, cyber security, risk, or technology degrees preferred.
- Visa sponsorship
- Participates in E-Verify to determine employment eligibility.
About the job
Leads WHOOP’s governance, risk, and compliance program, strengthening security controls and organizational compliance while managing a GRC team and partnering across the business.
What you'll do
- Develop and continuously improve the GRC program, security control frameworks, policies, standards, and awareness programs.
- Manage the enterprise risk register, prioritize risks, and provide executive-level reporting; support incident response and program improvements.
- Manage and develop GRC analysts, and evaluate and improve GRC tools, processes, and metrics.
What they ask for
- 10+ years of experience in GRC, information security, or cybersecurity, including 5+ years managing professionals in these fields.
- Demonstrated success scaling GRC programs and building or integrating programs in enterprise security.
- Deep understanding of standards and regulations including ISO 27001, SOC 2, GDPR, PCI, and NIST CSF.
- Minimum bachelor’s degree in any discipline.
Nice to have
- Computer science, cyber security, risk, or technology degree.
- CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor certification; experience establishing DevSecOps, AI Governance, or SSDLC guardrails.
Pay
$185,000-$205,000 USD base salary
Tools
ISO 27001, SOC 2, GDPR, PCI, NIST CSF, DevSecOps, AI Governance, SSDLC
AI focus
Bonus qualification: establishing AI Governance guardrails.
Model-written summary · the original posting is authoritative