GRC Analyst

About UsFounded in 1992 in Dover, NH, Planet Fitness is one of the largest and fastest-growing franchisors and operators of fitness centers in the world by number of members and locations. As of March31, 2026, Planet Fitness had approximately 21.5 million members and 2,909 clubs in all 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Australia and Spain. The Company’s mission is to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment, which we call the Judgement Free Zone. Approximately 90% of Planet Fitness clubs are owned and operated by independent business owners.At Planet Fitness, our unique mission has always been to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment. And we’re proud of the amazing Planet Fitness team that supports our clubs and team members. They are comprised of dynamic, dedicated, and talented individuals who represent our values of integrity, transparency, passion, respect, and excellence (while having fun!) in everything they do.Joining the PF family means being part of a company that cares about bettering the health and wellbeing of our communities. It means being a part of a supportive, engaging workforce with an inclusive culture that values diversity and creates an environment where everyone can feel they belong. It means encouraging professional growth and development. It means making true, lasting connections with your co-workers with celebrations, team building activities and engaging corporate events! It means creating a positive impact in our local communities through our Judgement Free Generation philanthropic initiative. It means being part of a brand that you can be proud of!For the past 30 years, we’ve helped millions of people in their fitness journey and revolutionized the industry along the way. And we’re just getting started!OverviewThe Governance, Risk, and Compliance (GRC) Analyst is a strategic and critical role that closely collaborates with the Senior Director, Information Security on expanding and supporting the company’s brand-wide governance, risk, and compliance programs by working with IT, various business units, and external vendors. As a GRC Analyst, you will play a crucial role in ensuring the organization adheres to regulatory guidelines, implements effective risk management practices, and maintains robust governance frameworks. This position requires a deep understanding of industry regulations, risk assessment methodologies, and compliance standards. The GRC Analyst role is pivotal in safeguarding the organization’s assets, maintaining compliance with regulatory standards, and enhancing overall governance practices.This role follows a hybrid schedule and requires regular, in-person work at our Boston, MA or Hampton, NH office. Our hybrid model is M/T/W in office and TH/F are optional work-from-home. Candidates must reside within commuting distance of one of these locations. Fully remote work is not available for this role.ResponsibilitiesCollaborates closely with the Senior Director of Information Security on various governance, risk, and compliance initiatives.Plays a pivotal role in the development and ongoing maintenance of the company’s GDPR compliance program.Interprets and stays informed on pertinent regulations and compliance requirements, including GDPR, CCPA, CPRA, PCI, and SOX.Conducts comprehensive compliance audits and assessments to evaluate adherence to regulatory standards.Ensures that policies, procedures, and controls align with established regulatory frameworks.Performs risk assessments across diverse business units to identify potential threats and vulnerabilities.Develops risk mitigation strategies and partners with stakeholders to implement effective controls.Monitors governance processes to ensure accountability and transparency throughout the organization.Assists in maintaining compliance with the NIST 800-171 security framework.Prepares regular reports and presentations for management and stakeholders, detailing GRC activities, findings, effectiveness, and recommendations.Maintains accurate documentation of risk assessments, compliance audits, and governance processes.Participates in incident response efforts to investigate and mitigate potential security breaches or compliance violations.Develops training materials and conducts educational sessions on compliance and risk management best practices.Promotes a culture of compliance and awareness across the organization.QualificationsBachelor's degree in Computer Science, Information Systems, or a related field, coupled with a minimum of 5 years of relevant experience in information security and IT compliance, specifically in areas such as GDPR, CCPA, CPRA, PCI, and SOXProven track record in a Governance, Risk, and Compliance (GRC) role, demonstrating a strong understanding of risk assessment methodologies, regulatory requirements, and compliance frameworksRelevant certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC), are strongly preferredExtensive experience in developing and managing GDPR compliance programsBackground in managing risk practices within retail, payment, and e-commerce sectorsExperience in risk management within development environmentsFamiliarity with GRC platforms, including Archer Insight and AuditBoardStrong knowledge of security frameworks, including NIST and ISO 27001Understanding of operational risk assessment methodologies, including mitigation development, monitoring, and reportingDemonstrates a balanced approach to risk management, understanding the need to align risk strategies with business objectivesStrong analytical skills with the ability to interpret complex regulatory requirementsExtremely detail-oriented, efficient, and organized with exceptional planning, prioritization, organizational, and project management skillsExcellent presentation and communication skills along with the ability to effectively convey complex ideas to both technical and non-technical audiences across all organizational levelsAble to establish and maintain effective, collaborative work relationships with diverse individuals, internally and externallyCreative, progressive, thought leadership with the ability to influence at all levels of the organizationDedicated learner with a natural curiosity for consistent growthExhibits comfort, ease, and flexibility working in an extremely fast-paced ever-changing, deadline-driven environmentCooperative team player with an upbeat, positive, “can-do” attitude!Ability to work off-hours and provide on-call support as neededPerksPlanet Fitness cares about you and your well-being. We offer a comprehensive benefits package to eligible employees which includes the core medical, dental, vision, life and disability as well as supplemental accident, hospital and critical illness coverage options. In addition, we are proud to offer eligible employees a generous time off program (including volunteer time), childcare reimbursement, paid parental leave, pet care reimbursement, tuition reimbursement, free Black Card membership, learning and development programs and a whole host of engagement activities. We offer a 401(k) Plan with safe harbor employer matching and an employee stock purchase plan. This role is also eligible to participate in an annual corporate bonus incentive program based on company financial and personal performance.The salary for MA-based and NH-based employees hired into this role will be aligned with the range below. This is a good faith estimate, and the amount of base salary will correspond with a candidate’s professional experience, qualifications and internal equity.Annual Base Salary Range: $90,000-$110,000This role is also eligible to participate in an annual corporate bonus incentive program based on company financial and personal performance.Note to Applicants:We have been made aware of an increasing number of hiring fraud schemes across numerous platforms. Planet Fitness never requires advance payments of any kind for computer equipment or any other purpose at the start of employment. Any request for you to provide payment information during the application process is part of a fraud scheme. Further, we recommend that you do not provide sensitive personal information (SSN, DOB, driver’s license number) as part of the initial application process.Job SummaryJob ID: Category: Information TechnologyType: Full TimeName: Hampton, NH (preferred) or Boston, MAZip: Postal Code: 03842