Senior GRC Analyst

📋 Description

• Lead cyber, AI, and technology risk assessments across systems, cloud, and processes.
• Maintain the enterprise cyber risk register; draft risk statements and track mitigations.
• Translate technical findings into clear business risk scenarios for prioritization.
• Advance quantitative risk analysis methods (e.g., FAIR) to improve measurement.
• Prepare materials for Cyber Risk Committee and executive risk reporting.
• Partner with Security Architecture to assess risk in designs, cloud, and data flows.

🎯 Requirements

• 6+ years in cybersecurity or enterprise risk management.
• Structured cybersecurity or IT risk assessment experience.
• Experience maintaining risk registers and tracking mitigations.
• Strong knowledge of NIST CSF, ISO 27001, PCI DSS; GDPR/HIPAA familiarity.
• Ability to translate technical findings into business risk for non-technical stakeholders.
• AI/ML risk assessment experience; familiarity with AI governance frameworks.

🎁 Benefits

• Competitive base salary and meaningful equity.
• Equity aligns employees with WHOOP's long-term growth.
• Consistent pay practices and comprehensive benefits.