Senior GRC Analyst
The Senior Governance, Risk, and Compliance (GRC) Analyst at WHOOP is a pivotal role within the company's cybersecurity and risk management team. WHOOP, headquartered in Boston, Massachusetts, is renowned for its innovative wearable health technology that empowers users to monitor and improve their health metrics. The GRC Analyst will be integral in fortifying WHOOP's security posture and ensuring compliance with industry standards.
In this role, the analyst will lead the daily execution of the GRC program, focusing on cybersecurity and AI risk assessments, managing exceptions, and reviewing the Software Development Life Cycle (SDLC). Key responsibilities include developing enterprise cyber risk registers, creating risk mitigation plans, preparing executive risk reports, and designing dashboards to provide leadership with clear visibility into cybersecurity risks. The analyst will also collaborate with cross-functional teams to evaluate new initiatives and third-party integrations, ensuring that emerging technologies, including AI and machine learning systems, are assessed for potential risks.
Candidates should possess expertise in cybersecurity risk assessment, IT risk management, and the maintenance of risk registers. Proficiency with security frameworks such as NIST Cybersecurity Framework (CSF), ISO 27001, and PCI DSS is essential, along with a solid understanding of regulatory compliance requirements like GDPR and HIPAA. Experience in AI/ML risk evaluation and familiarity with quantitative cyber risk analysis approaches, such as the FAIR model, are highly desirable. The ability to translate technical findings into clear business risk scenarios and support quantitative cyber risk analysis approaches like FAIR is crucial.
WHOOP offers a comprehensive compensation package that includes medical, dental, and vision coverage, a $500 annual wellness stipend, a free WHOOP membership plus one to gift, daily meals at the Boston HQ, and access to a gym and recovery tools. The company also provides a flexible work schedule, allowing employees to balance their professional and personal lives effectively. Additionally, WHOOP supports its employees with generous parental leave, offering 18 weeks of paid leave with an additional 2-week transition period, and provides family medical leave to accommodate various family needs.
WHOOP's culture is characterized by a collaborative and mission-driven environment. Employees are encouraged to take ownership, make decisions, and keep things moving forward, even when the path isn't always clear. The company emphasizes transparency, ambition, and a commitment to adding healthy years to people's lives. Regular company-wide meetings reinforce alignment and foster a sense of community, while employee resource groups, offsites, and social events provide additional opportunities to connect beyond day-to-day collaboration. This environment offers employees the chance to engage in meaningful work, hold each other to high standards, and contribute to the company's growth and success.
Joining WHOOP as a Senior GRC Analyst presents an opportunity to be part of a leading company in wearable health technology, contributing to the security and compliance of innovative products that impact users' health and well-being. The role offers a dynamic and supportive work environment, opportunities for professional growth, and the chance to make a significant impact within the organization.