AI Risk & Compliance Analyst

The role

This person will lead day-to-day operations and support the risk management program at GRC. They will perform structured cybersecurity and AI risk assessments, manage exceptions, and conduct SDLC reviews.

What you will do

• Lead governance, risk assessment, and compliance activities for AI/ML systems, LLM integrations, AI agents, and retrieval-augmented workflows
• Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into GRC frameworks
• Develop, maintain, and refine AI risk and compliance controls aligned with relevant frameworks
• Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI tools
• Manage the vendor risk assessment lifecycle for AI/ML related suppliers
• Support audit activities by capturing evidence and coordinating stakeholders
• Develop and maintain AI-specific GRC policies, standards, and procedures
• Facilitate AI risk and compliance reporting to leadership
• Monitor emerging AI governance requirements and best practices
• Support security incident documentation and post-incident analysis for AI system events

Required qualifications

• 6+ years of experience in Governance, Risk & Compliance, including risk assessment, policy development, audit coordination, and third-party risk management
• Demonstrated experience performing governance or risk assessments for AI/ML systems, including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems
• Experience translating AI-specific risks into documented control requirements and governance standards
• Hands-on experience conducting third-party risk assessments for AI vendors, LLM platforms, AI APIs, or machine learning service providers
• Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001, NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards
• Strong understanding of data governance concepts relevant to AI systems
• Experience supporting regulatory readiness or compliance efforts related to AI systems
• Proven ability to collaborate with engineering and security teams to validate control implementation and remediation
• Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance, or a related field

Benefits

• base salary
• generous equity package

Before you apply

• The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office
• WHOOP participates in E-verify to determine employment eligibility

About the company

WHOOP is on a mission to unlock and inspire performance for life.