1

Grc Risk Analyst Jobs in Boston, MA (NOW HIRING)

GRC Analyst - Third Party Risk

Boston, MA ยท On-site

$70K - $110K/yr

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security ...

GRC Analyst - Third Party Risk

Boston, MA ยท On-site

$70K - $110K/yr

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security ...

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security ...

Senior GRC Analyst

Boston, MA ยท Remote

$140K - $165K/yr

As a Senior GRC Analyst at DigitalOcean, you will lead the strategic maturation of DigitalOcean ... Risk Governance: Lead both annual and ad-hoc risk assessments; maintain a dynamic risk register and ...

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation ...

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation ...

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation ...

Senior GRC Analyst

Boston, MA ยท On-site

$130K - $170K/yr

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... The ideal candidate combines strong analytical thinking, critical risk mind-set with the ability to ...

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... The ideal candidate combines strong analytical thinking, critical risk mind-set with the ability to ...

Senior GRC Analyst

Boston, MA ยท On-site

$130K - $170K/yr

The Governance, Risk, and Compliance (GRC) team helps ensure technology and cybersecurity risks are ... The ideal candidate combines strong analytical thinking, critical risk mind-set with the ability to ...

Experience with GRC platforms (e.g., Archer) and risk reporting tools (e.g., PowerBI dashboards ... Strong analytical skills, attention to detail, and ability to make independent, informed decisions.

Experience with GRC platforms (e.g., Archer) and risk reporting tools (e.g., PowerBI dashboards ... Strong analytical skills, attention to detail, and ability to make independent, informed decisions.

next page

Showing results 1-20

Grc Risk Analyst information

See Boston, MA salary details

$16

$43

$71

How much do grc risk analyst jobs pay per hour?

As of Jul 27, 2026, the average hourly pay for grc risk analyst in Boston, MA is $43.98, according to ZipRecruiter salary data. Most workers in this role earn between $32.40 and $53.56 per hour, depending on experience, location, and employer.

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What are GRC Risk Analysts?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst, and why are they important?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.
What job categories do people searching Grc Risk Analyst jobs in Boston, MA look for? The top searched job categories for Grc Risk Analyst jobs in Boston, MA are:
What cities near Boston, MA are hiring for Grc Risk Analyst jobs? Cities near Boston, MA with the most Grc Risk Analyst job openings:
GRC Analyst - Third Party Risk

GRC Analyst - Third Party Risk

Whoop

Boston, MA โ€ข On-site

$70K - $110K/yr

Full-time

Posted 19 days ago


Job description

As a GRC Analyst, you will support the WHOOP Governance, Risk, and Compliance program. You will help manage third-party vendor risk reviews, and operational requests, in cross-functional security compliance workflows. Success in this role requires strong attention to detail, responsiveness and accountability through completion in a fast-paced environment.
The key focus of this role will be helping ensure third-party vendor assessment requests are reviewed, prioritized, routed, tracked, and completed effectively. You will use intake and ticketing data to identify workflow trends, recurring questions, handoff gaps, and opportunities to improve guidance, templates, reporting, automation, and stakeholder experience.
RESPONSIBILITIES:
  • Support day-to-day third-party vendor risk assessments - manage and triage GRC third-party vendor assessment intakes and accurate tracking through resolution
  • Perform vendor risk reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners
  • Assist with third-party risk program management activities

QUALIFICATIONS:
  • 2+ years of experience in GRC - third-party risk management experience preferred
  • Understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls - ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS
  • Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management
  • Being a team player and working to achieve common goal in a dynamic setting
  • A minimum bachelor's degree in any discipline. Computer science, cyber security and risk or technology degrees preferred.

This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don't meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company's long-term growth and success.
The U.S. base salary range for this full-time position is $70,000 - $110,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate's specific qualifications, expertise, and alignment with the role's requirements.

Whoop logo

About Whoop

Sourced by ZipRecruiter

At WHOOP, we're on a mission to unlock human performance. WHOOP empowers users (Olympians, Professional Athletes, Fitness Enthusiasts, etc) to perform at a higher level through a deeper understanding of their bodies and daily lives.

Industry

Fitness and sports centers

Company size

501 - 1,000 Employees

Headquarters location

Boston, MA, US

Year founded

2012