This GRC Analyst role is a strategic and critical position, working closely with the Senior Director of Information Security to expand and support the company's brand-wide governance, risk, and compliance programs. The analyst collaborates with IT, various business units, and external vendors to ensure adherence to regulatory guidelines, implement effective risk management practices, and maintain robust governance frameworks. This role is pivotal in safeguarding the organization's assets, maintaining compliance with regulatory standards, and enhancing overall governance practices.
Responsibilities
Collaborate closely with the Senior Director of Information Security on various governance, risk, and compliance initiatives
Play a pivotal role in the development and ongoing maintenance of the company's GDPR compliance program
Interpret and stay informed on pertinent regulations and compliance requirements, including GDPR, CCPA, CPRA, PCI, and SOX
Conduct comprehensive compliance audits and assessments to evaluate adherence to regulatory standards
Ensure that policies, procedures, and controls align with established regulatory frameworks
Perform risk assessments across diverse business units to identify potential threats and vulnerabilities
Develop risk mitigation strategies and partner with stakeholders to implement effective controls
Monitor governance processes to ensure accountability and transparency throughout the organization
Assist in maintaining compliance with the NIST 800-171 security framework
Prepare regular reports and presentations for management and stakeholders, detailing GRC activities, findings, effectiveness, and recommendations
Maintain accurate documentation of risk assessments, compliance audits, and governance processes
Participate in incident response efforts to investigate and mitigate potential security breaches or compliance violations
Develop training materials and conduct educational sessions on compliance and risk management best practices
Promote a culture of compliance and awareness across the organization
Requirements
Bachelor's degree in Computer Science, Information Systems, or a related field
Minimum of 5 years of relevant experience in information security and IT compliance, specifically in areas such as GDPR, CCPA, CPRA, PCI, and SOX
Proven track record in a Governance, Risk, and Compliance (GRC) role, demonstrating a strong understanding of risk assessment methodologies, regulatory requirements, and compliance frameworks
Extensive experience in developing and managing GDPR compliance programs
Background in managing risk practices within retail, payment, and e-commerce sectors
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Experience in risk management within development environments
Familiarity with GRC platforms, including Archer Insight and AuditBoard
Strong knowledge of security frameworks, including NIST and ISO 27001
Understanding of operational risk assessment methodologies, including mitigation development, monitoring, and reporting
Demonstrates a balanced approach to risk management, understanding the need to align risk strategies with business objectives
Strong analytical skills with the ability to interpret complex regulatory requirements
Extremely detail-oriented, efficient, and organized with exceptional planning, prioritization, organizational, and project management skills
Excellent presentation and communication skills along with the ability to effectively convey complex ideas to both technical and non-technical audiences across all organizational levels
Able to establish and maintain effective, collaborative work relationships with diverse individuals, internally and externally
Creative, progressive, thought leadership with the ability to influence at all levels of the organization
Dedicated learner with a natural curiosity for consistent growth
Exhibits comfort, ease, and flexibility working in an extremely fast-paced ever-changing, deadline-driven environment
Cooperative team player with an upbeat, positive, “can-do” attitude!
Ability to work off-hours and provide on-call support as needed
Nice to have:
Relevant certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)
Benefits
Comprehensive medical, dental, vision, life and disability insurance
Supplemental accident, hospital and critical illness coverage options
Generous time off program (including volunteer time)
Childcare reimbursement
Paid parental leave
Pet care reimbursement
Tuition reimbursement
Free Black Card membership
Learning and development programs
Engagement activities
401(k) Plan with safe harbor employer matching
Employee stock purchase plan
Annual corporate bonus incentive program based on company financial and personal performance
Important Details
Work format: hybrid schedule (M/T/W in office, TH/F optional work-from-home)
Locations: Boston, MA or Hampton, NH
About the Company
Founded in 1992 in Dover, NH, Planet Fitness is one of the largest and fastest-growing franchisors and operators of fitness centers in the world. As of March 31, 2026, Planet Fitness had approximately 21.5 million members and 2,909 clubs in all 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Australia and Spain. The Company's mission is to enhance people's lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment, which they call the Judgement Free Zone®.
