Leads daily Governance, Risk, and Compliance operations, including enterprise risk reviews, third-party risk assessments, security and privacy compliance, risk-register management, audit support, policy governance, metrics reporting, and incident-response compliance activities. The role manages team workload, oversees complex assessments, partners with Legal, IT, Security, and Product teams, and strengthens organizational resilience through scalable GRC processes and SSDLC governance.
Top Skills: CisaCisspCriscGdprGrcHipaaHitrust CcsfpIso 27001Nist CsfPci DssSoc 2Ssdlc
Lead cybersecurity, AI, and technology risk assessments across systems, cloud environments, business processes, and initiatives. Maintain the enterprise cyber risk register, track mitigation plans, translate technical findings into business risks, support FAIR-based quantitative analysis, and prepare executive reporting. Partner with Security, Legal, Product, IT, and business teams to assess architectures, AI use cases, emerging technologies, and third-party integrations while strengthening GRC processes and operational resilience.
Top Skills: Artificial IntelligenceCloud EnvironmentsFairGdprHipaaIso 27001Iso/Iec 42001Machine LearningNist Ai RmfNist CsfPci DssSdlc
Lead and scale multiple product security engineering teams while defining security strategy, secure SDLC standards, identity and authentication capabilities, vulnerability management, DevSecOps tooling, cloud security, privacy by design, and threat modeling. Partner across engineering, product, legal, compliance, and enterprise security; mentor leaders and staff-level contributors; and foster a collaborative culture focused on secure, reliable software delivery.
Top Skills: AWSCi/CdContainer ScanningContainerized MicroservicesDevsecopsSastScaSecrets DetectionThreat Modeling
Lead governance, risk, and compliance activities for AI/ML systems, LLM integrations, AI agents, and related vendors. Conduct AI risk and third-party assessments, map controls to frameworks, manage remediation, support audits, develop AI-specific policies, report risk metrics, monitor regulatory developments, and coordinate incident governance with Legal, Security, Product, and Engineering teams.
Top Skills: Ai AgentsAi/MlEu Ai ActGdprGrc FrameworksIso/Iec 42001LlmsNist Ai Risk Management FrameworkNist Cybersecurity FrameworkPci DssRetrieval-Augmented GenerationRisk Dashboards
Leads enterprise Security Engineering and Security Operations strategy, teams, technical standards, roadmaps, and measurable outcomes. Oversees detection and response, incident readiness, security automation, identity, cloud, endpoint, SaaS, data protection, and AI security. Manages significant incidents, security partners, organizational design, hiring, and cross-functional collaboration while developing managers, engineers, and analysts. Partners with the CISO to strengthen security posture and operational performance in a sensitive-data technology environment.
Top Skills: Ai SecurityApplication SecurityCloud SecurityData ProtectionDetection EngineeringEndpoint SecurityIdentity And Access ManagementIncident ResponseManaged Detection And Response (Mdr)Managed Security Services Providers (Mssp)Model SecuritySaas SecuritySecurity AutomationSecurity TelemetrySIEM
Build and mature WHOOP’s Security Architecture practice by establishing governance, standards, reference architectures, and reusable security patterns. Provide architectural guidance across application, cloud, infrastructure, API, identity, networking, AI, and enterprise systems. Lead threat modeling and architecture reviews, assess vendor security, translate compliance requirements into engineering controls, mentor teams, document guidance, and advise leaders on security strategy and risk-based decisions.
Top Skills: AWSAws Certified Security SpecialtyCcspCisspGiacHipaaIso 27001Nist 800-53Pci DssSoc 2Togaf
Lead the design, execution, and continuous improvement of WHOOP’s GRC program. Responsibilities include managing security controls and compliance frameworks, enterprise and third-party risk assessments, incident response documentation, GRC intake and prioritization, executive reporting, operational metrics, and process improvement. The role also mentors GRC analysts and partners with Legal, Security, Product, and IT to support regulatory compliance, reduce enterprise risk, and strengthen operational resilience.
Top Skills: GdprHipaaIso 27001Nist CsfPci DssSoc 2
Designs and scales high-fidelity security detections across cloud, identity, endpoint, network, and application environments. Develops Detection-as-Code rules aligned with MITRE ATT&CK, translates threat intelligence into detections, and validates coverage through adversary emulation. Tunes alerts, reduces false positives, automates enrichment and triage, tracks detection KPIs, supports incident investigations, participates in on-call rotations, and partners with engineering, infrastructure, product, IT, and GRC teams. Applies analytics and machine learning to improve detection fidelity and investigation workflows.
Top Skills: Detection-As-CodeGoMachine LearningMitre Att&CkPowershellPythonSigmaSuricataYara
Lead enterprise security incident response as the primary escalation point and incident commander. Investigate, contain, and remediate threats across hosts, cloud environments, logs, identity systems, SIEM, and EDR tools while coordinating with the SOC, IT, GRC, and Legal. Maintain response playbooks, conduct post-incident reviews and tabletop exercises, support breach assessments and regulatory notifications, track incident metrics, and improve detection and response capabilities. Participate in an after-hours on-call rotation.
Top Skills: Cloud Security MonitoringEdrMitre Att&CkSIEM
New
Track Smarter, Apply Better.
Ditch the spreadsheets. Organize your job search with our freeApplication Tracker.
Use For Free
Let Your Resume Do The Work
Upload your resume to be matched with jobs you're a great fit for.
Upload Resume
Top Companies in Boston, MA Hiring Cybersecurity Roles