AI Risk & Compliance Analyst

Whoop
Boston
Workplace: OnsiteFull timeUSD 100,000 - 140,000 annuallyFunction: Legal, Risk & ComplianceExperience: 6+ yearsEducation: bachelorsSkills: ["Analytical thinking","Risk mindset","Communication","Stakeholder management","Collaboration"]

Own day-to-day governance, risk, and compliance operations for WHOOP’s AI/ML and cybersecurity initiatives. Lead structured AI risk and compliance assessments across LLM integrations, AI agents, retrieval-augmented workflows, and third-party vendors. Build and maintain AI-specific GRC controls and policies mapped to ISO/IEC 42001, NIST CSF, NIST AI RMF, EU AI Act, GDPR, and more, while supporting audits and communicating risk findings to technical and non-technical stakeholders.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Whoop
Whoop
3 weeks ago

AI Risk & Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Own day-to-day governance, risk, and compliance operations for WHOOP’s AI/ML and cybersecurity initiatives. Lead structured AI risk and compliance assessments across LLM integrations, AI agents, retrieval-augmented workflows, and third-party vendors. Build and maintain AI-specific GRC controls and policies mapped to ISO/IEC 42001, NIST CSF, NIST AI RMF, EU AI Act, GDPR, and more, while supporting audits and communicating risk findings to technical and non-technical stakeholders.
Location: Boston
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Lead governance, risk assessment, and compliance activities for AI/ML systems, including LLM integrations, AI agents, and retrieval-augmented workflows.
  • •Partner with the Senior Security Engineer, AI/ML to integrate risk findings into GRC frameworks and translate technical risk into governance requirements.
  • •Develop, maintain, and refine AI risk and compliance controls aligned with frameworks such as ISO/IEC 42001, NIST CSF, NIST AI RMF, EU AI Act, and GDPR.
  • •Execute and manage vendor AI/ML risk assessment lifecycles, including control mapping, evidence collection, remediation tracking, and follow-ups.
  • •Support audit activities and AI risk reporting to leadership, including risk dashboards, trend analysis, and control effectiveness metrics; coordinate incident documentation and post-incident analysis with Legal and Security.

Pay and Benefits

Salary: USD 100,000 - 140,000 annually
Equity and Bonus:Equity

Key Requirements

  • •6+ years of experience in Governance, Risk & Compliance, including risk assessment, policy development, audit coordination, and third-party risk management.
  • •Experience performing governance or risk assessments for AI/ML systems, including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems.
  • •Ability to translate AI-specific risks (e.g., data poisoning, prompt injection, model misuse, data leakage, explainability gaps) into documented control requirements and governance standards.
  • •Hands-on experience conducting third-party risk assessments for AI vendors, LLM platforms, AI APIs, or machine learning service providers.
  • •Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance, or a related field.
Experience:6+ yearsGovernance, Risk & ComplianceAI/ML
Education:Bachelor's
Skills:Analytical thinkingRisk mindsetCommunicationStakeholder managementCollaboration
Tech Stack:AI/MLLLM integrationsLLMsAI agentsRetrieval-augmented workflowsSDLC reviewsThird-party riskISO/IEC 42001NIST Cybersecurity FrameworkNIST AI Risk Management FrameworkEU AI ActGDPRPCI DSSAI governance

Company Brief

Whoop
Whoop designs and sells a subscription-based wearable fitness tracker and analytics platform that monitors recovery, strain, and sleep to optimize athletic performance and daily health for consumers and professional athletes.
Industry: Wearables
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: Boston, United States
Founded: 2012
WebsiteLinkedIn