GRC Leader: Enterprise Risk & Compliance Ops

WHOOP; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible vacation

Parental leave (18 weeks)

Stock options

WHOOP membership

Medical, dental, vision

Wellness stipend

Sleep bonus $100

Office in Boston (One Kenmore Square)

Job summary

WHOOP is seeking a Manager of Governance, Risk, and Compliance to lead the day-to-day GRC program in a fast-paced, high-growth environment. You will collaborate with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen resilience.

You will oversee governance activities, policy management, and evidence collection, while coordinating third-party risk assessments and SSDLC guardrails.

Qualifications

• Leads the GRC program and operationalizes governance, risk, and compliance initiatives.
• Manages third-party risk, SSDLC, and regulatory alignment across teams.
• Drives KPI reporting, policy management, evidence collection, and audit support.

Responsibilities

• Lead day-to-day GRC operations across governance, risk, compliance.
• Coordinate with Legal, Security, Product and others to advance compliance objectives.
• Oversee third-party risk lifecycle and vendor due diligence.
• Manage workload, track requests, and ensure timely delivery with quality.
• Develop and report operational metrics and KPIs to GRC leadership.
• Support security incident response with compliance obligations and risk remediation.

Skills

GRC leadership

SSDLC risk assessments

Policy management

Vendor risk assessments

Audit support

KPI reporting

Cross-functional coordination

Information security

Privacy frameworks

Communication skills

Education

Bachelor's degree

Job description

WHOOP is seeking a Manager of Governance, Risk, and Compliance to lead the day-to-day GRC program in a fast-paced, high-growth environment. You will collaborate with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen resilience.

You will oversee governance activities, policy management, and evidence collection, while coordinating third-party risk assessments and SSDLC guardrails.