# Manager, Governance Risk & Compliance (GRC) at Whoop

Whoop is hiring a Manager, Governance Risk & Compliance (GRC) for a remote role open to applicants in United States. It pays $155k-$195k a year and Level rates it Little AI ●○○○; you can [apply on Whoop](https://jobsbylevel.com/go/52e1fb6f-3dd5-4d76-b452-6df06a02fbc5?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Remote (Boston, MA).

## Details

- Company: [Whoop](https://jobsbylevel.com/companies/whoop)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Remote (Boston, MA)
- Salary: $155k-$195k
- Posted: September 8, 2026
- Apply: https://jobsbylevel.com/go/52e1fb6f-3dd5-4d76-b452-6df06a02fbc5?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=manager-governance-risk-compliance-grc-at-whoop-765402

## Prepare for this job

The job page lists 4 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/manager-governance-risk-compliance-grc-at-whoop-765402

## Description

At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. As a Manager of Governance, Risk, and Compliance you will lead the day-to-day execution and support the ongoing operation of the GRC program in a fast-paced, high-growth environment. This role is responsible for hands-on execution of GRC initiatives, collaborating across Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk exposure, and strengthen operational resilience. RESPONSIBILITIES Lead the day-to-day operations of the GRC function, ensuring timely execution of governance, risk, compliance, third-party risk, and secure development lifecycle (SSDLC) assessment activities. Lead enterprise risk reviews by driving GRC intake and request triage, personally overseeing complex assessments while prioritizing and delegating work across the team. Perform and lead the third-party risk management lifecycle by conducting and overseeing vendor risk assessments and due diligence in partnership with Legal, IT, and Security. Manage team workload and capacity by assigning, tracking, and escalating requests as needed to ensure consistent delivery, quality, and stakeholder satisfaction. Develop and report operational metrics and KPIs, providing weekly dashboards and status updates to GRC leadership. Contribute directly to governance activities, including policy management, control assessments, evidence collection, audit support, and continuous compliance initiatives. Maintain the enterprise risk register by documenting, tracking, escalating, and reporting technology, cybersecurity, privacy, and third-party risks Support security incident response activities by coordinating compliance-related obligations, regulatory documentation, and risk remediation tracking. QUALIFICATIONS 8+ years of experience in GRC, information security, cybersecurity; with 2+ years of experience leading or managing GRC, information security, or audit professionals. Demonstrated experience leading operational GRC programs, including intake management, workload prioritization, KPI reporting, and cross-functional coordination. Extensive hands-on experience performing third-party/vendor risk assessments, security reviews, due diligence, and risk-based decision support. Strong knowledge of SSDLC risk assessments and application security governance processes. Deep knowledge of security and privacy frameworks and regulations, including ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS, and modern cybersecurity risk management practices. Excellent written and verbal communication skills, with the ability to communicate effectively with technical teams, business stakeholders, auditors, and executive leadership A minimum bachelor’s degree in any discipline. Computer science, cybersecurity, and risk or technology degrees preferred. BONUS QUALIFICATIONS Professional certifications such as CISSP, CRISC, CISA, or ISO 27001 Lead Auditor. Demonstrated success in program and project management skills with the ability to manage multiple concurrent workstreams in a fast-paced environment. Exceptional organizational, analytical, and problem-solving skills. Background in establishing SSDLC guardrails. ABOUT YOU You are a risk focused GRC leader with ability to assess security risks and translate it into business impact. You have the ability to assess a risk impact in terms of business trade-offs. You are passionate about building scalable GRC programs that have a lasting impact in improving the overall security posture of an organization without slowing the speed of innovation. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/manager-governance-risk-compliance-grc-at-whoop-765402

Source: https://jobsbylevel.com/jobs/manager-governance-risk-compliance-grc-at-whoop-765402

## Cite this page

Level. https://jobsbylevel.com/jobs/manager-governance-risk-compliance-grc-at-whoop-765402.

Get job alerts: https://jobsbylevel.com/newsletter