1

Compliance Risk Management Jobs in Boston, MA (NOW HIRING)

Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring documented ... Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend ...

IT Risk & Compliance Analyst

Andover, MA ยท On-site +1

$95K - $95K/yr

This position reports to the Manager, IT Risk & Compliance. This role is remote and may be based anywhere within the United States. Primary Job Duties and Responsibilities * Coordinate IT compliance, ...

Provides leadership in risk management by promoting the highest level of quality care to the patients, ensuring regulatory compliance and mitigating malpractice risk through loss prevention. Plays an ...

Risk & Compliance Project Manager

Boston, MA ยท On-site

$99K - $125K/yr

The Risk and Compliance Project Manager will be responsible for managing projects in Risk and ... Produce regular project reports and management updates * Create and maintain project schedules and ...

Showing results 41-60

Compliance Risk Management information

See Boston, MA salary details

$41.8K

$103.3K

$170.6K

How much do compliance risk management jobs pay per year?

As of Aug 9, 2026, the average yearly pay for compliance risk management in Boston, MA is $103,320.00, according to ZipRecruiter salary data. Most workers in this role earn between $76,000.00 and $126,600.00 per year, depending on experience, location, and employer.

Is compliance risk management a good career?

Compliance risk management is a growing field that involves identifying and mitigating regulatory and legal risks within organizations. It often requires knowledge of laws, strong analytical skills, and certifications such as Certified Compliance & Ethics Professional (CCEP). The role offers stability and opportunities for advancement in various industries.

What is the difference between Compliance Risk Management vs Compliance Analyst?

AspectCompliance Risk ManagementCompliance Analyst
CertificationsCertified Compliance & Ethics Professional (CCEP), Certified Risk Management Professional (CRMP)Certified Compliance & Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM)
Work EnvironmentFocuses on risk assessment, policy development, and strategic compliance planningConducts audits, monitors compliance, and reports findings
Employer & Industry UsageUsed in financial, healthcare, and corporate sectors for risk oversightCommon in financial services, healthcare, and regulatory agencies for day-to-day compliance tasks

Compliance Risk Management involves strategic oversight of compliance risks and policy development, while Compliance Analysts focus on executing compliance audits and monitoring. Both roles are essential but differ in scope and responsibilities within organizations.

What does a compliance risk management do?

A compliance risk management professional identifies, assesses, and monitors regulatory and legal risks within an organization to ensure adherence to laws, regulations, and internal policies. They develop and implement controls, conduct audits, and stay informed about changing requirements to prevent violations and reduce potential penalties.

How does a compliance risk management professional typically collaborate with other departments within an organization?

Compliance Risk Management professionals work closely with departments such as Legal, Internal Audit, Operations, and IT to ensure company policies and procedures meet regulatory requirements. They often coordinate cross-functional meetings to assess risks, develop mitigation strategies, and implement compliance training. This collaborative approach helps identify potential compliance gaps early and ensures the organization maintains a culture of ethical conduct and regulatory adherence. Effective communication and partnership with various teams are essential to proactively manage risks and respond to regulatory changes.

What are the key skills and qualifications needed to thrive in compliance risk management?

To thrive in Compliance Risk Management, you need a solid understanding of regulatory requirements, risk assessment, and industry standards, often backed by a degree in law, finance, or a related field. Familiarity with compliance management systems, risk analysis tools, and certifications such as Certified Compliance & Ethics Professional (CCEP) or Certified Risk Manager (CRM) are typically required. Strong analytical thinking, attention to detail, and effective communication are vital soft skills for this role. These skills and qualifications help ensure organizations remain compliant, minimize risk exposure, and maintain their reputational integrity.

What is compliance risk management?

Compliance Risk Management refers to the process of identifying, assessing, and mitigating risks that arise from failing to comply with laws, regulations, and internal policies. Professionals in this field ensure that organizations operate within the legal frameworks and ethical standards relevant to their industry. They develop policies, conduct audits, and provide training to reduce the risk of violations, which can lead to legal penalties, financial losses, or reputational damage. Effective compliance risk management helps organizations maintain trust with stakeholders and avoid costly regulatory issues.
What are the most commonly searched types of Compliance Risk Management jobs in Boston, MA? The most popular types of Compliance Risk Management jobs in Boston, MA are:
What are popular job titles related to Compliance Risk Management jobs in Boston, MA? For Compliance Risk Management jobs in Boston, MA, the most frequently searched job titles are:
What cities near Boston, MA are hiring for Compliance Risk Management jobs? Cities near Boston, MA with the most Compliance Risk Management job openings:
Infographic showing various Compliance Risk Management job openings in Boston, MA as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $103,320 per year, or $49.7 per hour.

AI Risk & Compliance Analyst

Whoop

Boston, MA โ€ข On-site

Full-time

Posted 22 days ago


Job description

At WHOOP, we are on a mission to unlock human performance and extend healthspan. The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are identified, assessed, and communicated clearly across the organization.
WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation and support the ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management,
SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise
risk, and strengthen operational resilience.
The ideal candidate combines strong analytical thinking, critical risk mind-set, familiarity with AI governance and has the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders.
RESPONSIBILITIES:
  • Lead governance, risk assessment, and compliance activities specific to AI/ML systems,
    LLM integrations, AI agents, and retrieval-augmented workflows
  • Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into
    GRC frameworks and translate technical risk into governance requirements
  • Develop, maintain, and refine AI risk and compliance controls aligned with relevant
    frameworks, including ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk
    Management Framework, EU AI Act, GDPR, and other applicable standard
  • Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI
    tools, including third-party risk scoring, control mapping, and remediation tracking
  • Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring
    documented controls, evidence collection, and follow-up on remediation items
  • Support audit activities, capturing evidence and coordinating cross-functional
    stakeholders for internal and external compliance reviews involving AI systems
  • Develop and maintain AI-specific GRC policies, standards, and procedures that map to AI
    risk domains, explainability requirements, and compliance obligations
  • Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend
    analysis, control effectiveness measurements, and key metrics
  • Monitor emerging AI governance requirements, guidance, and best practices, translating
    them into GRC program updates and compliance recommendations
  • Support security incident documentation and post-incident analysis for AI system events,
    coordinating with Legal and Security teams to ensure appropriate governance response

QUALIFICATIONS:
  • 6+ years of experience in Governance, Risk & Compliance, including risk assessment,
    policy development, audit coordination, and third-party risk management
  • Demonstrated experience performing governance or risk assessments for AI/ML systems,
    including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems
  • Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model
    misuse, data leakage, explainability gaps) into documented control requirements and
    governance standards
  • Hands-on experience conducting third-party risk assessments for AI vendors, LLM
    platforms, AI APIs, or machine learning service providers
  • Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001,
    NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards
  • Strong understanding of data governance concepts relevant to AI systems, including
    training data lineage, data retention, model output handling, and human oversight
    requirements
  • Experience supporting regulatory readiness or compliance efforts related to AI systems
  • Proven ability to collaborate with engineering and security teams to validate control
    implementation and remediation
  • Bachelor's degree in Information Security, Computer Science, Business Risk, Compliance,
    or a related field

This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don't meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company's long-term growth and success.
The U.S. base salary range for this full-time position is $100,000 - $140,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate's specific qualifications, expertise, and alignment with the role's requirements.

Whoop logo

About Whoop

Sourced by ZipRecruiter

At WHOOP, we're on a mission to unlock human performance. WHOOP empowers users (Olympians, Professional Athletes, Fitness Enthusiasts, etc) to perform at a higher level through a deeper understanding of their bodies and daily lives.

Industry

Fitness and sports centers

Company size

501 - 1,000 Employees

Headquarters location

Boston, MA, US

Year founded

2012