Find jobs
Pricing
Free Resume Checker
Blog
Sign in
Sign up
FIND JOBSPRICINGFREE RESUME CHECKERBLOGSIGN INSIGN UP
WH
WHOOP

AI Risk & Compliance Analyst

Salary$100k – $140k
LocationBoston, MA
Work modeon-site
Typefull-time
SeniorityMid
Experience6+ yrs
DepartmentInformation Security
EquityIncluded
Company size1,001–5,000 people
First seenSep 30, 2026 · 1w ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Must have9
6+ years of experience in Governance, Risk & Compliance, including risk assessment, policy development, audit coordination, and third-party risk management
Demonstrated experience performing governance or risk assessments for AI/ML systems, including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems
Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model misuse, data leakage, explainability gaps) into documented control requirements and governance standards
Hands-on experience conducting third-party risk assessments for AI vendors, LLM platforms, AI APIs, or machine learning service providers
Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001, NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards
Strong understanding of data governance concepts relevant to AI systems, including training data lineage, data retention, model output handling, and human oversight requirements
Experience supporting regulatory readiness or compliance efforts related to AI systems
Proven ability to collaborate with engineering and security teams to validate control implementation and remediation
Bachelor's degree in Information Security, Computer Science, Business Risk, Compliance, or a related field
Skills
AI/ML systems
LLM integrations
AI agents
retrieval-augmented workflows
ISO/IEC 42001
NIST Cybersecurity Framework
NIST AI Risk Management Framework
EU AI Act
GDPR
PCI DSS
Benefits
Equity
About the company
At WHOOP, we’re on a mission to unlock and inspire performance for life.
About the role
WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation and support the ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management,
SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience.
The ideal candidate combines strong analytical thinking, critical risk mind-set, familiarity with AI governance and has the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders.
RESPONSIBILITIES:
•
Lead governance, risk assessment, and compliance activities specific to AI/ML systems,
LLM integrations, AI agents, and retrieval-augmented workflows
•
Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into
GRC frameworks and translate technical risk into governance requirements
•
Develop, maintain, and refine AI risk and compliance controls aligned with relevant
frameworks, including ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk
Management Framework, EU AI Act, GDPR, and other applicable standard
•
Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI
tools, including third-party risk scoring, control mapping, and remediation tracking
•
Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring
documented controls, evidence collection, and follow-up on remediation items
•
Support audit activities, capturing evidence and coordinating cross-functional
stakeholders for internal and external compliance reviews involving AI systems
•
Develop and maintain AI-specific GRC policies, standards, and procedures that map to AI
risk domains, explainability requirements, and compliance obligations
•
Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend
analysis, control effectiveness measurements, and key metrics
•
Monitor emerging AI governance requirements, guidance, and best practices, translating
them into GRC program updates and compliance recommendations
•
Support security incident documentation and post-incident analysis for AI system events,
coordinating with Legal and Security teams to ensure appropriate governance response
QUALIFICATIONS:
•
6+ years of experience in Governance, Risk & Compliance, including risk assessment,
policy development, audit coordination, and third-party risk management
•
Demonstrated experience performing governance or risk assessments for AI/ML systems,
including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems
•
Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model
misuse, data leakage, explainability gaps) into documented control requirements and
governance standards
•
Hands-on experience conducting third-party risk assessments for AI vendors, LLM
platforms, AI APIs, or machine learning service providers
•
Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001,
NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards
•
Strong understanding of data governance concepts relevant to AI systems, including
training data lineage, data retention, model output handling, and human oversight
requirements
•
Experience supporting regulatory readiness or compliance efforts related to AI systems
•
Proven ability to collaborate with engineering and security teams to validate control
implementation and remediation
•
Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance,
or a related field
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
Legal
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility
Benefits
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for this full-time position is $100,000 - $140,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
More roles at WHOOP
Senior Applied ML Algorithm EngineerStaff Applied Machine Learning Scientist (Health)Technical - Standard Software (Virtual Final)Sensor Intelligence Engineer II (Optical Signal Processing)Director of Embedded Software Engineering
Seekless
Seek less: one search across companies' own career pages, instead of a dozen job boards.
Product
Find jobsCompaniesPricingFree Resume Checker
Company
AboutBlog
Legal
PrivacyTermsCookies
© 2026 SEEKLESS. ALL RIGHTS RESERVED.BUILT WITH CARE