GRC Analyst, WHOOP
More information about location
Wearable health and fitness devices
Be an early applicant
Wearable health and fitness devices
501-1000 employees
Be an early applicant
More information about location
501-1000 employees
Company mission
To unlock human performance by helping people find their inner potential.
Role
Who you are
- Your attention to detail and analytical skills will contribute to the effectiveness of our security and compliance efforts
- Bachelor's degree in Information Security, Computer Science, or relevant certifications (e.g., CompTIA Security+, CISSP, CISA, CISM, GRC certifications) a plus
- Minimum of 2 years of experience in information security, risk management, audit, or compliance roles
- Strong understanding of GRC concepts, principles, and practices
- Familiarity with relevant regulations, standards, and frameworks (e.g., GDPR, SOC2, ISO 27001, NIST Cybersecurity Framework)
- Excellent analytical and problem-solving skills with attention to detail
- Effective communication and interpersonal skills, with the ability to establish relationships and collaborate with cross-functional teams
- Detail-oriented with superior organizational and time-management skills - balancing multiple projects, deadlines, and requests
- Proven ability to navigate ambiguity and complexity, turning uncertainty into clarity and actionable insights
- Driven with a pro-active and results-oriented approach, demonstrating a can-do attitude and determination to succeed
What the job involves
- As a GRC Analyst, you will play a crucial role in supporting the development, implementation, and maintenance of our Governance, Risk, and Compliance (GRC) program
- Working under the guidance of the CISO, you will assist in various GRC activities, including policy development, risk assessment, compliance monitoring, and audit coordination
- Support GRC Framework Implementation: Assist in the development and implementation of the GRC framework to support business objectives, aligned with industry best practices and regulatory requirements
- Risk Management: Assist in conducting risk assessments, supporting the development and adherence of risk mitigation strategies, and maintaining the risk register
- Compliance Monitoring: Support ongoing compliance monitoring activities to ensure adherence to internal policies, relevant regulations, standards, and contractual obligations
- Vendor Risk Management: Assist in evaluating and managing risks associated with third-party vendors and service providers through vendor risk assessment processes
- Support Incident Response and Investigation: Provide support in incident response activities, including documentation, coordination, and post-incident analysis as directed
- Security Awareness and Training: Assist in the development and delivery of security awareness and training programs to educate employees on security policies, procedures, and best practices
- Audit Support: Support audit activities by gathering evidence, conducting preliminary assessments, and assisting in the remediation of audit findings
- Ticket Queue Support: Manage and resolve GRC support tickets promptly and efficiently
- Policy Review and Management: Participate in the review, development, and maintenance of security policies, standards, and procedures to ensure compliance with regulatory mandates and industry standards
- Contribute to Continuous Improvement: Identify areas for process improvement within the GRC program and assist in implementing enhancements to improve effectiveness and efficiency
Our take
WHOOP develops wearable health-tracking devices designed to help athletes optimise their performance. Its technology continuously monitors recovery, sleep, and training hours to fine-tune both individual and team performance. Unlike competitors that primarily track exercise data, WHOOP's holistic approach includes metrics like heart rate variability, which can influence more effective and healthier exercise routines.
By focusing on a subscription model that includes the cost of the physical device, WHOOP differentiates itself from competitors that charge a higher one-time fee for their products. This model provides ongoing value and encourages users to stay engaged with their health data.
WHOOP's comprehensive monitoring of strain and recovery has given it a competitive edge, even as other brands like Fitbit have incorporated similar features. Beyond sports performance, WHOOP has conducted extensive research on predicting premature births, aiming to integrate these findings into their app. This commitment to broader health applications demonstrates WHOOP's dedication to advancing wearable health technology.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Aug 2021
$200m
SERIES F
Oct 2020
$100m
SERIES E
Total funding: $404.8m
Company benefits
- TAKE TIME OFF: Our PTO plan encourages members to take time off in order to come back refreshed.
- LIVE A HEALTHY LIFESTYLE: Our benefits package includes premium medical, dental, and vision coverage for employees and their dependents. Life and disability insurance are also available.
- FEEL INVESTED: 401k and stock options to share in the future of WHOOP.
- EAT WELL: Keep hunger at bay with endless snacks in our fully stocked kitchen. Enjoy catered team lunches on Friday, and even a cold brew keg.
- KNOW THE PRODUCT: We offer you a WHOOP strap and membership at no cost.
- BE ACTIVE: Take advantage of our office gym and on-site showers, as well as a $500yearly wellness perk for fitness classes and memberships.
- BE PRESENT: Take care of your loved ones with 12 weeks paid parental leave, plus an additional 2 weeks to gradually return to work.
- LOVE WHERE YOU WORK: Sitting in the heart of Fenway, our beautiful office overlooks Fenway Park. A prime location for great food, not to mention catching a Sox game, too!
- WORK HARD, PLAY HARDER: If we don't already have a club here that fits your lifestyle and interests, you're encouraged to start one. Share your passions with others at work, or discover new ones!
Company values
- Our work is grounded in research, design, and privacy
- At WHOOP, the best idea wins
- We have a bias for action
- We operate at the intersection of high intensity and high humility
- Our differences are a source of strength
- We are obsessed with the member experience
Company HQ
West Fens, Boston, MA
Articles
Leadership
Will Ahmed
(CEO)Studied at Harvard. Worked as a Summer Analyst at Allen & Company and at Lindsay Goldberg. Founded Whoop in their final year.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Diversity, Equity & Inclusion at WHOOP
- Under the umbrella of Inclusivity & Belonging, WHOOP operates a number of Employee Resource Groups (ERGs), including; Black at WHOOP, WHOOP GOOP (LGBTQ+), Women of WHOOP, Veterans & Military personnel, Adapt (Abled & Disabled Allies Partnering Together), and Wise (Women In Science & Engineering) .
Share this job
View 28 more jobs at WHOOP