GRC & Third-Party Risk Analyst - Vendor Compliance

Whoop; Boston (MA); On-site; USD 70,000 - 110,000; Full time

Job summary

WHOOP is seeking a GRC Analyst in Boston to support the Governance, Risk, and Compliance program and manage third-party vendor risk reviews within cross-functional security workflows.

You will review, prioritize, route, track, and complete vendor assessments, using intake data to improve guidance, templates, reporting, and stakeholder experience. A bachelor’s degree and 2+ years in GRC are expected; relocation to Boston may be required.

Qualifications

• 2+ years of experience in GRC - third-party risk management experience preferred.
• Understanding of ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS.
• Highly organized with clear escalations and informed recommendations to management.
• A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred.

Responsibilities

• Support day-to-day third-party vendor risk assessments – manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution
• Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners
• Assist with third-party risk program management activities

Skills

GRC experience

Vendor risk

Cybersecurity frameworks

Team collaboration

Education

Bachelor's degree

CS/Cyber security/tech degree preferred

Job description

WHOOP is seeking a GRC Analyst in Boston to support the Governance, Risk, and Compliance program and manage third-party vendor risk reviews within cross-functional security workflows.

You will review, prioritize, route, track, and complete vendor assessments, using intake data to improve guidance, templates, reporting, and stakeholder experience. A bachelor’s degree and 2+ years in GRC are expected; relocation to Boston may be required.