Manager and Senior Manager: Governance, Risk, & Compliance (GRC)

At WHOOP, we're on a mission to unlock human performance. WHOOP empowersmembers to perform at a higher level through a deeper understanding of their bodiesand daily lives.As a Senior Manager GRC you will play a critical role in shaping, driving, and leadingour GRC team towards supporting ongoing operation and enhancement of the overallinformation security governance program, assessing the risk landscape in a fast-paced,high-growth environment. This role will strategically craft the roadmap in collaborationwith stakeholders across the business and fulfill growing security needs assessing risklandscape across WHOOP.In addition to core GRC responsibilities, you will partner closely with functions acrossProduct, Engineering, Data Analytics, and Legal to meaningfully move the securityposture of the company. We are seeking a leader and strategic partner with priorexperience driving GRC programs for technology teams.RESPONSIBILITIESLead the development, implementation, and continuous evolution of the GRCprogram, driving both strategy and hands-on execution.Lead the development, implementation, and ongoing management of scalablesecurity control frameworks, policies, standards, and security awarenessprograms, contributing directly while guiding the team’s work to strengthen organizational compliance.Support incident response activities and translated into actionable improvementsacross the risk and compliance program.Actively manage the enterprise risk register, driving risk prioritization, anddelivering executive-level reporting.Manage, mentor, and develop GRC analysts while balancing hands-on executionwith effective delegation and team enablement as the program scales.Evaluate, implement, and continuously improve GRC program, tools, processes,and metrics.QUALIFICATIONS10+ years of experience in GRC, or information security / cybersecurity, with 5+years in managing GRC, information security, or cybersecurity professionals.Demonstrated success scaling GRC programs whilst crafting clear and efficientteam objectives and programs.Deep understanding of regulations and standards including, but not limited to ISO27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligationsExperience building or integrating GRC programs in enterprise security toimprove overall security posture of the organizationExcellent communication, interpersonal, and leadership skills with the ability toinfluence across teams and levelsA minimum bachelor’s degree in any discipline. Computer science, cyber securityand risk or technology degrees preferred.BONUS QUALIFICATIONSCertifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor.Background in leading Enterprise Risk, Cybersecurity Risk, Information Securityprograms.Background in establishing DevSecOps, AI Governance, and SSDLC guardrails.ABOUT YOUYou are a strategic and people-focused leader who thrives on balancing hands-onoversight with long-term organizational growth.You are a risk aware leader with ability to translate security risks in businessterms to influence both technical and non-technical teams.You are passionate about building bridges across different departments and canoperate confidently in both strategic and security control tactical domains.You believe that security enables innovation, and you lead with integrity fosteringa culture that embodies a risk mind-set. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibilityThe WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.The U.S. base salary range for these full-time positions is $185,000-$205,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.