Senior Manager: Governance, Risk, & Compliance (GRC)
- Location
- Boston, MA
- Work mode
- On-site
- Employment type
- Full-time
About the job
At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers
members to perform at a higher level through a deeper understanding of their bodies
and daily lives.
As a Senior Manager GRC you will play a critical role in shaping, driving, and leading
our GRC team towards supporting ongoing operation and enhancement of the overall
information security governance program, assessing the risk landscape in a fast-paced,
high-growth environment. This role will strategically craft the roadmap in collaboration
with stakeholders across the business and fulfill growing security needs assessing risk
landscape across WHOOP.
In addition to core GRC responsibilities, you will partner closely with functions across
Product, Engineering, Data Analytics, and Legal to meaningfully move the security
posture of the company. We are seeking a leader and strategic partner with prior
experience driving GRC programs for technology teams.
RESPONSIBILITIES
- Lead the development, implementation, and continuous evolution of the GRC
- Lead the development, implementation, and continuous evolution of the GRC
- Lead the development, implementation, and ongoing management of scalable security control frameworks, policies, standards, and security awareness programs, contributing directly while guiding the team’s work to strengthen organizational compliance.
- Support incident response activities and translated into actionable improvements
- Support incident response activities and translated into actionable improvements
- Actively manage the enterprise risk register, driving risk prioritization, and
- Actively manage the enterprise risk register, driving risk prioritization, and
- Manage, mentor, and develop GRC analysts while balancing hands-on execution
- Manage, mentor, and develop GRC analysts while balancing hands-on execution
- Evaluate, implement, and continuously improve GRC program, tools, processes,
- Evaluate, implement, and continuously improve GRC program, tools, processes,
QUALIFICATIONS
- 10+ years of experience in GRC, or information security / cybersecurity, with 5+
- 10+ years of experience in GRC, or information security / cybersecurity, with 5+
- Demonstrated success scaling GRC programs whilst crafting clear and efficient
- Demonstrated success scaling GRC programs whilst crafting clear and efficient
- Deep understanding of regulations and standards including, but not limited to ISO
- Deep understanding of regulations and standards including, but not limited to ISO
- Experience building or integrating GRC programs in enterprise security to
- Experience building or integrating GRC programs in enterprise security to
- Excellent communication, interpersonal, and leadership skills with the ability to
- Excellent communication, interpersonal, and leadership skills with the ability to
- A minimum bachelor’s degree in any discipline. Computer science, cyber security
- A minimum bachelor’s degree in any discipline. Computer science, cyber security
BONUS QUALIFICATIONS
- Certifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor.
- Background in leading Enterprise Risk, Cybersecurity Risk, Information Security
- Background in leading Enterprise Risk, Cybersecurity Risk, Information Security
- Background in establishing DevSecOps, AI Governance, and SSDLC guardrails.
ABOUT YOU
- You are a strategic and people-focused leader who thrives on balancing hands-on
- You are a strategic and people-focused leader who thrives on balancing hands-on
- You are a risk aware leader with ability to translate security risks in business
- You are a risk aware leader with ability to translate security risks in business
- You are passionate about building bridges across different departments and can
- You are passionate about building bridges across different departments and can
- You believe that security enables innovation, and you lead with integrity fostering
- You believe that security enables innovation, and you lead with integrity fostering
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for these full-time positions is $185,000-$205,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
From Whoop's careers page (Ashby), checked 29 Oct 2026.
How to apply
- Select Apply on whoop.com. It opens Whoop's own application form in a new tab, run on Ashby.
- Fill in the form and upload your résumé there. Jobiwork never sees your application.
- Whoop will reply to you directly. No real employer asks you for money to apply.
Posted 8 Sept 2026 · checked 29 Oct 2026 · Report this job