Senior GRC Leader: Security Strategy & Risk

WHOOP; Boston (MA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Flexible vacation

Parental leave 18 weeks

Stock options

WHOOP membership

Medical, dental, vision

Wellness stipend $500/year

Sleep incentive $100

Job summary

WHOOP is seeking a Senior Manager, GRC to shape and lead our information security governance program in a fast‑growing environment. You will drive the GRC roadmap with stakeholders across Product, Engineering, Data Analytics, and Legal to meet evolving security needs and regulatory requirements.

You will lead development and ongoing management of security controls, policies, and awareness, while guiding a growing team to scale risk management, reporting, and strategic governance across the

Qualifications

• Excellent communication, interpersonal, and leadership skills with the ability to influence across teams and levels.
• Deep understanding of regulations and standards including ISO 27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligations.
• 10+ years of experience in GRC, or information security / cybersecurity, with 5+ years in managing GRC, information security, or cybersecurity professionals.
• Bachelor’s degree required; computer science, cyber security or risk/technology degrees preferred.
• Experience building or integrating GRC programs in enterprise security to improve overall security posture.

Responsibilities

• Lead the development, implementation, and continuous evolution of the GRC program, driving strategy and hands‑on execution.
• Partner with Product, Engineering, Data Analytics, and Legal to strengthen security posture.
• Develop, implement, and manage scalable security control frameworks, policies, standards, and awareness programs.
• Actively manage the enterprise risk register, drive risk prioritization, and deliver executive‑level reporting.
• Mentor and develop GRC analysts while balancing hands‑on execution as the program scales.

Skills

Leadership

Strategic thinking

Regulatory expertise

GRC experience

Stakeholder management

Education

Bachelor's degree

Cybersecurity or risk-related degree preferred

Job description

WHOOP is seeking a Senior Manager, GRC to shape and lead our information security governance program in a fast‑growing environment. You will drive the GRC roadmap with stakeholders across Product, Engineering, Data Analytics, and Legal to meet evolving security needs and regulatory requirements.

You will lead development and ongoing management of security controls, policies, and awareness, while guiding a growing team to scale risk management, reporting, and strategic governance across the