Senior GRC Analyst (AI)

TL;DR

Senior GRC Analyst (AI): Leading the execution and operation of the GRC program with an accent on cybersecurity and AI risk assessments, exceptions management, and SDLC reviews. Focus on translating complex technical findings into business risk scenarios and maturing quantitative risk analysis approaches like FAIR.

Location: Must be based in or be able to relocate to Boston, MA

Salary: $130,000 - $170,000

Company

WHOOP is a high-growth technology company focused on human performance and wearable health monitoring.

What you will do

• Lead cyber, AI, and technology risk assessments across systems and cloud environments.
• Maintain the enterprise cyber risk register and track mitigation plans.
• Translate technical findings and control gaps into clear business risk scenarios.
• Partner with Security Architecture to assess risk in system designs and data flows.
• Evaluate new initiatives, AI use cases, and third-party integrations through a risk lens.
• Develop dashboards and reporting to provide leadership with visibility into cybersecurity risks.

Requirements

• 6+ years of experience in cybersecurity, enterprise risk management, or information security.
• Demonstrated experience conducting structured cybersecurity or IT risk assessments.
• Deep understanding of security frameworks such as NIST CSF, ISO 27001, or PCI DSS.
• Familiarity with regulatory environments like GDPR or HIPAA.
• Experience assessing risks related to AI, machine learning, or emerging technologies.
• Must be based in or willing to relocate to Boston, MA.

Nice to have

• Professional certifications such as CRISC, CISSP, CISA, or CGRC.
• Familiarity with NIST AI RMF or ISO/IEC 42001.

Culture & Benefits

• Competitive base salary and generous equity package.
• Comprehensive benefits package.
• Opportunity to work in a fast-paced, high-growth environment.
• Commitment to a diverse and inclusive workplace.