Senior Manager: Governance, Risk, & Compliance (GRC)

Role overview

WHOOP is seeking a Senior Manager of Governance, Risk, and Compliance to lead and shape the company’s GRC program within the Information Security department. You will drive both strategic direction and hands-on execution to support WHOOP’s information security governance as the company scales in a fast-paced, high-growth environment.

Key responsibilities

Lead the development, implementation, and continuous evolution of the GRC program, balancing strategic planning with direct execution.
Develop, implement, and manage scalable security control frameworks, policies, standards, and security awareness programs while contributing hands-on work and guiding your team.
Support incident response activities and translate findings into actionable improvements across the risk and compliance program.
Actively manage the enterprise risk register, prioritize organizational risks, and deliver executive-level reporting.
Manage, mentor, and develop GRC analysts while maintaining effective delegation and team enablement as the program grows.
Evaluate, implement, and continuously improve GRC program tools, processes, and performance metrics.
Partner across Product, Engineering, Data Analytics, and Legal functions to enhance the company’s overall security posture.

Requirements

At least 10 years of experience in GRC, information security, or cybersecurity, with 5 or more years managing GRC, information security, or cybersecurity professionals.
Demonstrated success scaling GRC programs and establishing clear, efficient team objectives.
Deep knowledge of regulations and standards including ISO 27001, SOC 2, GDPR, PCI, and NIST Cybersecurity Framework, as well as privacy and security obligations.
Experience building or integrating GRC programs in enterprise security to improve organizational security posture.
Excellent communication, interpersonal, and leadership skills with ability to influence across teams and organizational levels.
Bachelor’s degree in any discipline, with computer science, cybersecurity, risk, or technology degrees preferred.

What makes this role worth considering

This position is based in WHOOP’s Boston, MA office and offers a competitive total compensation package including base salary, equity, and benefits. The role provides an opportunity to shape security governance at a mission-driven company focused on unlocking human performance while working alongside cross-functional leaders who view security as an enabler of innovation.