Senior Manager: Governance, Risk, & Compliance (GRC)

At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. As a Senior Manager GRC you will play a critical role in shaping, driving, and leading our GRC team towards supporting ongoing operation and enhancement of the overall information security governance program, assessing the risk landscape in a fast-paced, high-growth environment. This role will strategically craft the roadmap in collaboration with stakeholders across the business and fulfill growing security needs assessing risk landscape across WHOOP. In addition to core GRC responsibilities, you will partner closely with functions across Product, Engineering, Data Analytics, and Legal to meaningfully move the security posture of the company. We are seeking a leader and strategic partner with prior experience driving GRC programs for technology teams. RESPONSIBILITIES - Lead the development, implementation, and continuous evolution of the GRC program, driving both strategy and hands-on execution. - Lead the development, implementation, and ongoing management of scalable security control frameworks, policies, standards, and security awareness programs, contributing directly while guiding the team’s work to strengthen organizational compliance. - Support incident response activities and translated into actionable improvements across the risk and compliance program. - Actively manage the enterprise risk register, driving risk prioritization, and delivering executive-level reporting. - Manage, mentor, and develop GRC analysts while balancing hands-on execution with effective delegation and team enablement as the program scales. - Evaluate, implement, and continuously improve GRC program, tools, processes, and metrics. QUALIFICATIONS - 10+ years of experience in GRC, or information security / cybersecurity, with 5+ years in managing GRC, information security, or cybersecurity professionals. - Demonstrated success scaling GRC programs whilst crafting clear and efficient team objectives and programs. - Deep understanding of regulations and standards including, but not limited to ISO 27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligations - Experience building or integrating GRC programs in enterprise security to improve overall security posture of the organization - Excellent communication, interpersonal, and leadership skills with the ability to influence across teams and levels - A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred. BONUS QUALIFICATIONS - Certifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor. - Background in leading Enterprise Risk, Cybersecurity Risk, Information Security programs. - Background in establishing DevSecOps, AI Governance, and SSDLC guardrails. ABOUT YOU - You are a strategic and people-focused leader who thrives on balancing hands-on oversight with long-term organizational growth. - You are a risk aware leader with ability to translate security risks in business terms to influence both technical and non-technical teams. - You are passionate about building bridges across different departments and can operate confidently in both strategic and security control tactical domains. - You believe that security enables innovation, and you lead with integrity fostering a culture that embodies a risk mind-set. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for these full-time positions is $185,000-$205,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.