WHOOP logo

GRC Analyst, Third Party Risk

WHOOP

On-site
Boston, MA
Full-time
Mid Level
2+ yrs
$70k–$110kPosted 4w ago

Real job — pulled straight from WHOOP’s careers page · Verified July 16, 2026 · No reposts.

Job description

WHOOP is hiring a GRC Analyst, Third Party Risk — a full-time, based in Boston, MA role ($70k–$110k). Apply directly on WHOOP's careers page below.

GRC Analyst - Third Party Risk

Team: Information Security

Location: Boston, MA

Workplace Type: onsite

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail, responsiveness and accountability through completion in a fast-paced environment.

The key focus of this role will be helping ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively. You will use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.

RESPONSIBILITIES:

  • Support day-to-day third-party vendor risk assessments – manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution

  • Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners

  • Assist with third-party risk program management activities

QUALIFICATIONS:

  • 2+ years of experience in GRC - third-party risk management experience preferred

  • Understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls – ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS

  • Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management

  • Being a team player and working to achieve common goal in a dynamic setting

  • A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred.

This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.

Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.

WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility

The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.

At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.

The U.S. base salary range for this full-time position is $70,000 - $110,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. 

In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.

These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Get GRC Analyst, Third Party Risk jobs like this

New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.

Email me new jobs
BBVA logo

BBVA

New

Information Security Manager

Ciudad de Mexico, Miguel Hidalgo
✓ From careers page· 16m ago
BBVA logo

BBVA

New

Information Security Specialist

Las Condes, Region Metropolitana de Santiago
✓ From careers page· 17m ago
CoinDesk logo

Manager, Security Operations & Cyber Defense

$185k–$235kNew York, NY
✓ From careers page· 21m ago
Encora logo

Senior Information Security Risk Analyst

Lima, Peru
✓ From careers page· 1h ago

Frequently asked questions

What is the salary for GRC Analyst, Third Party Risk at WHOOP?

The estimated salary range for GRC Analyst, Third Party Risk at WHOOP is $70,000 - $110,000 USD per year.

What skills are required for GRC Analyst, Third Party Risk at WHOOP?

The required skills for GRC Analyst, Third Party Risk at WHOOP include: ISO 27001, SOC 2, PCI DSS.

What is the seniority level for GRC Analyst, Third Party Risk at WHOOP?

GRC Analyst, Third Party Risk at WHOOP is a Mid Level level position.

How do I apply for GRC Analyst, Third Party Risk at WHOOP?

You can view the full description and apply for GRC Analyst, Third Party Risk at WHOOP on EchoJobs: https://echojobs.io/job/whoop-grc-analyst-third-party-risk-fcala.