GRC Analyst, WHOOP
$85-135k
+ Equity
4+ days a week in office
Wearable health and fitness devices
Open for applications
Wearable health and fitness devices
1001+ employees
Open for applications
$85-135k
+ Equity
4+ days a week in office
1001+ employees
Company mission
To unlock human performance and Healthspan.
Role
Who you are
- Bachelor's degree in Information Security, Computer Science, or related field
- Compliance and security certifications (e.g., CompTIA Security+, CISSP, CISA, CISM, CRISC, other GRC certifications) a plus
- Minimum of 3 years demonstrated experience in GRC is mandatory
- Strong understanding of GRC concepts, principles, and practices
- Familiarity with using and or administrating GRC tools is a plus
- Demonstrated familiarity with relevant regulations, standards, and frameworks is required (e.g., GDPR, SOC2, ISO 27001, NIST Cybersecurity Framework, PCI DSS, HIPAA)
- Prior healthcare compliance experience and knowledge of HIPAA and or HITRUST is a plus
- Excellent analytical and problem-solving skills with attention to detail
- Effective communication and interpersonal skills, with the ability to establish relationships and collaborate with cross-functional teams
- Detail-oriented with superior organizational and time-management skills - balancing multiple projects, deadlines, and requests
- Proven ability to navigate ambiguity and complexity, turning uncertainty into clarity and actionable insights
- Driven with a pro-active and results-oriented approach, demonstrating a can-do attitude and determination to succeed
- Familiarity with Jira or other project management tools for organizing and managing daily work and projects is preferred
- Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply
What the job involves
- As a GRC Analyst, you will play a crucial role in supporting the development, implementation, and maintenance of our Governance, Risk, and Compliance (GRC) program
- Working under the guidance of the GRC Senior Manager you will assist in various activities, including policy development, risk assessments, compliance framework implementation and monitoring, and audit coordination
- Step into a role that empowers you to build a well-rounded foundation in GRC, explore multiple facets of the field, and sharpen your skills in specialized areas such as risk management or standards program management
- Your sharp eye for detail and strong analytical mindset will play a pivotal role in strengthening our security and compliance initiatives
- Assist in the development and implementation of GRC standards, frameworks and regulations (SOC2, ISO 27001, NIST Cybersecurity Framework, HIPAA, PCI DSS, etc.) to support business objectives, aligned with industry best practices and regulatory requirements
- Assist in conducting risk assessments, supporting the development and adherence of risk mitigation strategies, and maintaining the risk register
- Support ongoing compliance monitoring activities to ensure adherence to internal policies, relevant regulations, standards, and contractual obligations
- Assist in evaluating and managing risks associated with third-party vendors and service providers through vendor risk assessment processes
- Provide support in incident response activities, including documentation, coordination, and post-incident analysis as directed
- Assist in the development and delivery of security awareness and training programs to educate employees on security policies, procedures, and best practices
- Support audit activities by gathering evidence, conducting preliminary assessments, and assisting in the remediation of audit findings
- Manage and resolve GRC support tickets promptly and efficiently
- Participate in the review, development, and maintenance of security policies, standards, and procedures to ensure compliance with regulatory mandates and industry standards
- Maintain and update GRC standard operating procedures to ensure consistency and efficiency
- Identify areas for process improvement within the GRC program and assist in implementing enhancements to improve effectiveness and efficiency
- Work cross-functionally with IT, Engineering, Legal, HR, and other stakeholders to document and validate compliance controls and support their implementation within the GRC platform
- Leverage AI and automation tools to enhance compliance monitoring, reporting, evidence collection, and risk analysis
Our take
WHOOP develops wearable health-tracking devices designed to help athletes optimise their performance. Its technology continuously monitors recovery, sleep, and training hours to fine-tune both individual and team performance. Unlike competitors that primarily track exercise data, WHOOP's holistic approach includes metrics like heart rate variability, which can influence more effective and healthier exercise routines.
By focusing on a subscription model that includes the cost of the physical device, WHOOP differentiates itself from competitors that charge a higher one-time fee for their products. This model provides ongoing value and encourages users to stay engaged with their health data.
WHOOP's comprehensive monitoring of strain and recovery has given it a competitive edge, even as other brands like Fitbit have incorporated similar features. Beyond sports performance, WHOOP has conducted extensive research on predicting premature births, aiming to integrate these findings into their app. This commitment to broader health applications demonstrates WHOOP's dedication to advancing wearable health technology.
Steph
Company Specialist at Welcome to the Jungle
Insights
1% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Aug 2021
$200m
SERIES F
Oct 2020
$100m
SERIES E
Total funding: $404.8m
Company benefits
- Flexible Vacation: WHOOP has a flexible vacation policy that allows you to unwind, laptop-free, when you need it most.
- Focus on Family: We offer 18 weeks paid parental leave, plus an additional 2 weeks to gradually return to work.
- Get Invested: In addition to a competitive base salary and 401k, you're eligible to receive stock options to share in the future of WHOOP.
- WHOOP +1: Everyone on the team gets a complimentary WHOOP membership—plus another membership to share with a loved one.
- Health Matters: Our competitive benefits package covers medical, dental, and vision, in addition to mental health services, life and disability insurance, and more.
- Find Your Fit: Full-time employees get $500 a year to spend on wellness in whatever way they see fit, from fitness classes and memberships, to recovery services.
- It Pays to Sleep: Our Sleep Performance Program incentivizes employees to get more sleep. Log an average sleep performance of 85% or higher for the month and get a $100 bonus.
- Location, Location, Location: You can’t beat the views from the rooftop of One Kenmore Square. Feel inspired daily as you work, enjoy free snacks and coffee, and collaborate in the heart of Boston.
Company HQ
West Fens, Boston, MA
Leadership
Will Ahmed
(Founder & CEO)After graduating from Harvard with a Bachelor of Arts in Government and Economics, Will went on to hold Summer Analyst roles at Allen & Company and Lindsay Goldberg before founding WHOOP in 2012.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 60 more jobs at WHOOP