Senior Manager: Governance, Risk, & Compliance (GRC)

Boston, MA. Posted 2 months ago

The role

You will lead the development and evolution of the GRC program and manage GRC analysts. You will assess the risk landscape and partner with Product, Engineering, Data Analytics, and Legal functions.

What you will do

Lead the development, implementation, and continuous evolution of the GRC program.
Lead the development, implementation, and ongoing management of scalable security control frameworks, policies, standards, and security awareness programs.
Support incident response activities and translate them into actionable improvements.
Actively manage the enterprise risk register and deliver executive-level reporting.
Manage, mentor, and develop GRC analysts.
Evaluate, implement, and continuously improve GRC program, tools, processes, and metrics.

Required qualifications

10+ years of experience in GRC, or information security / cybersecurity
5+ years in managing GRC, information security, or cybersecurity professionals
Demonstrated success scaling GRC programs
Deep understanding of regulations and standards including ISO 27001, SOC 2, GDPR, PCI, NIST CSF, and privacy/security obligations
Experience building or integrating GRC programs in enterprise security
Excellent communication, interpersonal, and leadership skills
A minimum bachelor’s degree in any discipline

Nice to have

Computer science, cyber security and risk or technology degrees
Certifications such as CISA, CISSP, CIPP/E, CRISC, or ISO Lead Auditor
Background in leading Enterprise Risk, Cybersecurity Risk, Information Security programs
Background in establishing DevSecOps, AI Governance, and SSDLC guardrails

Benefits

base salary
generous equity package

Before you apply

The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.

About the company

WHOOP is on a mission to unlock and inspire performance for life by empowering members to perform at a higher level through a deeper understanding of their bodies and daily lives.