# GRC Analyst

**Company:** [WHOOP](https://hotfix.jobs/companies/whoop)
**Location:** Boston, MA
**Role:** Other
**Experience:** 2+ years
**Skills:** GRC, third party risk management, ISO 27001, nist csf, coso, SOC 2, pci-dss, cybersecurity compliance
**Posted:** 2026-07-07

> GRC Analyst supporting WHOOP's third-party vendor risk program. Manage vendor risk assessments, triage intakes, perform reviews and remediation tracking, and identify workflow improvements across Security, Legal, and other teams. Requires 2+ years GRC experience and knowledge of compliance frameworks.

## Job Description

## Responsibilities
- Support day-to-day third-party vendor risk assessments – manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution.
- Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners.
- Assist with third-party risk program management activities.
- Use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.

## Requirements
- 2+ years of experience in GRC.
- Understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls – ISO 27001, NIST CSF, COSO, SOC 2, PCI-DSS.
- Highly organized with strong operational discipline ensuring clear and expedient escalations with informed recommendations to management.
- Team player able to work to achieve common goals in a dynamic setting.
- Bachelor’s degree in any discipline (Computer science, cyber security, risk or technology degrees preferred).

## Nice-to-Haves
- Third-party risk management experience.

## Similar roles

- [Operations Analyst, Safety](https://hotfix.jobs/jobs/c9596fd3-542a-4907-b50f-b8c86b0d404a) - Thinking Machines Lab - San Francisco, CA - $190k – $300k/yr
- [Change Manager](https://hotfix.jobs/jobs/615be189-33ea-48a4-ae9d-04f508d825e8) - Navan
- [BGC Compliance Specialist](https://hotfix.jobs/jobs/ef5c4fdb-eeaf-466c-94f2-571422cc96d8) - Instacart - Remote - $23 – $29/hr
- [Business Systems Analyst, Enterprise Applications](https://hotfix.jobs/jobs/f4de7d8b-f885-449f-b4e5-d8406f739502) - Cribl - Remote - $79k – $124k/yr
- [Field Operations Specialist](https://hotfix.jobs/jobs/1ff039b0-5338-4d1f-a784-257c24b89ade) - NODA AI - Austin, TX

**Apply:** https://hotfix.jobs/jobs/46afa24c-e002-4629-873d-6ebece597cc6
**Canonical:** https://hotfix.jobs/jobs/46afa24c-e002-4629-873d-6ebece597cc6