Whoop

2 weeks ago

GRC Analyst - Third Party Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Support the Governance, Risk, and Compliance program by managing third-party vendor risk review workflows end to end. Triage vendor assessment intake requests, ensure accurate tracking through resolution, and coordinate reassessments and remediation follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners. Use intake and ticketing data to identify trends and improve guidance, templates, reporting, automation, and stakeholder experience.

Location: Boston

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Support day-to-day third-party vendor risk assessments by managing and triaging GRC vendor assessment intakes and tracking them through resolution.
•Perform vendor risk reviews and reassessments, coordinating with partners and tracking remediation, with follow-up across Security, Legal, Privacy, Procurement, IT, Finance, and business owners.
•Assist with third-party risk program management activities.
•Ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively.
•Use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.

Pay and Benefits

Salary: USD 70,000 - 110,000 annually

Equity and Bonus:Equity

Key Requirements

•2+ years of experience in GRC, with third-party risk management experience preferred.
•Understanding of cybersecurity compliance frameworks and controls including ISO 27001, NIST CSF, COSO, SOC 2, and PDI-DSS.
•Strong operational discipline with clear, expedient escalations and informed recommendations to management.
•Ability to work as a team player to achieve shared goals in a fast-paced environment.
•Minimum bachelor’s degree in any discipline; computer science, cyber security and risk, or technology degrees preferred.

Education:Bachelor's

Skills:Attention to detailResponsivenessAccountabilityOperational disciplineTeamwork

Tech Stack:ISO 27001NIST CSFCOSOSOC 2PDI-DSS

Company Brief

Whoop

Whoop designs and sells a subscription-based wearable fitness tracker and analytics platform that monitors recovery, strain, and sleep to optimize athletic performance and daily health for consumers and professional athletes.

Industry: Wearables

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Boston, United States

Founded: 2012

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Whoop

2 weeks ago

GRC Analyst - Third Party Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: Boston

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Support day-to-day third-party vendor risk assessments by managing and triaging GRC vendor assessment intakes and tracking them through resolution.
•Perform vendor risk reviews and reassessments, coordinating with partners and tracking remediation, with follow-up across Security, Legal, Privacy, Procurement, IT, Finance, and business owners.
•Assist with third-party risk program management activities.
•Ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively.
•Use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.

Pay and Benefits

Salary: USD 70,000 - 110,000 annually

Equity and Bonus:Equity

Key Requirements

•2+ years of experience in GRC, with third-party risk management experience preferred.
•Understanding of cybersecurity compliance frameworks and controls including ISO 27001, NIST CSF, COSO, SOC 2, and PDI-DSS.
•Strong operational discipline with clear, expedient escalations and informed recommendations to management.
•Ability to work as a team player to achieve shared goals in a fast-paced environment.
•Minimum bachelor’s degree in any discipline; computer science, cyber security and risk, or technology degrees preferred.

Education:Bachelor's

Skills:Attention to detailResponsivenessAccountabilityOperational disciplineTeamwork

Tech Stack:ISO 27001NIST CSFCOSOSOC 2PDI-DSS

Company Brief

Whoop

Industry: Wearables

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Boston, United States

Founded: 2012

Website LinkedIn