GRC Analyst

About Us

Founded in 1992 in Dover, NH, Planet Fitness is one of the largest and fastest-growing franchisors and operators of fitness centers in the world by number of members and locations. As of March 31, 2026, Planet Fitness had approximately 21.5 million members and 2,909 clubs in all 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Australia and Spain.

The Company’s mission is to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment, which we call the Judgement Free Zone®. Approximately 90% of Planet Fitness clubs are owned and operated by independent business owners.

At Planet Fitness, our purpose is to create a more connected and Judgement Free™ planet, where fitness and wellbeing are within reach for all. That commitment extends to our team members and how we work together.

Breaking Boundaries Together is how we bring our employee experience to life, creating a place where people can show up as themselves, explore what’s possible, continue to grow and achieve more together than they can alone. Guided by our PLANET Principles, we put people first, lead with authenticity and integrity, embrace change and thrive together.

For the past 30 years, we’ve helped millions of people in their fitness journey and revolutionized the industry along the way. And we’re just getting started!

Overview

The Governance, Risk, and Compliance (GRC) Analyst partners closely with the Sr. Director, Information Security to support and expand Planet Fitness' enterprise governance, risk, and compliance programs. This role works across IT, business teams, franchise support functions, and external partners to help ensure the organization effectively manages risk, maintains regulatory compliance, and supports information security objectives.

The GRC Analyst plays a key role in assessing risk, monitoring compliance requirements, supporting governance initiatives, and promoting security awareness across the organization. This position combines regulatory expertise, analytical thinking, and cross-functional collaboration to help safeguard company assets and strengthen Planet Fitness' overall security and compliance posture.

This role follows a hybrid schedule and requires regular, in-person work at our Boston, MA or Hampton, NH office. Our hybrid model is M/T/W in office and TH/F are optional work-from-home. Candidates must reside within commuting distance of one of these locations. Fully remote work is not available for this role.

Responsibilities

Governance & Compliance• Supports the development, implementation, and ongoing maintenance of enterprise governance, risk, and compliance programs.• Monitors regulatory requirements and industry standards, including GDPR, CCPA, CPRA, PCI, SOX, and other applicable compliance frameworks.• Assists in the development, review, and maintenance of policies, procedures, and controls to support compliance objectives.• Conducts compliance assessments and audits to evaluate adherence to regulatory and organizational requirements.• Maintains compliance documentation, evidence, and records to support internal and external audit activities.

Risk Management & Security Assessments• Performs risk assessments across business and technology environments to identify potential threats, vulnerabilities, and compliance gaps.• Partners with business and technical stakeholders to develop and track risk mitigation plans and corrective actions.• Coordinates third-party risk management activities by identifying, assessing, monitoring, and managing risks associated with vendors and other external business partners, including documenting findings and tracking remediation.• Assists in maintaining compliance with security frameworks, including NIST 800-171 and other relevant standards.• Evaluates control effectiveness and provides recommendations to strengthen security and compliance practices.• Participates in incident response and compliance investigations as needed.

Cross-Functional Partnership & Reporting• Collaborates with IT, Information Security, business teams, and external partners to support governance, risk, and compliance initiatives.• Prepares reports, dashboards, and presentations that communicate compliance activities, risk findings, and program effectiveness.• Serves as a trusted resource for stakeholders on compliance requirements, risk management practices, and governance processes.• Supports internal and external audits by coordinating requests, gathering documentation, and facilitating remediation activities.• Builds strong working relationships across the organization to promote accountability and effective risk management practices.

Awareness & Continuous Improvement• Develops and delivers compliance, governance, and security awareness materials and training programs.• Promotes a culture of compliance, accountability, and risk awareness throughout the organization.• Supports continuous improvement initiatives that strengthen governance processes and compliance program maturity.• Identifies opportunities to automate, streamline, and improve GRC-related activities and reporting.• Maintains awareness of emerging regulations, industry trends, and evolving security risks to support ongoing program enhancements

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent combination of education and experience• 5+ years of experience in governance, risk, compliance, information security, audit, or a related discipline• Experience supporting compliance programs involving GDPR, CCPA, CPRA, PCI, SOX, or similar regulatory frameworks• Demonstrated experience with Third-Party Risk Management (TPRM), including evaluating, monitoring, and managing risks associated with vendors and other third-party business partners, required• Strong understanding of risk assessment methodologies, security controls, and compliance management practices• Knowledge of security frameworks such as NIST, ISO 27001, or related standards • Experience supporting internal and external audits, risk assessments, and remediation activities• Familiarity with GRC platforms such as Archer, AuditBoard, or similar governance and compliance tools• Strong analytical, documentation, and problem-solving skills with the ability to interpret complex regulatory requirements• Relevant certifications such as CISA, CISM, CRISC, Security+, or similar credentials preferred• Experience within retail, franchise, payments, e-commerce, or consumer-facing environments preferred• Extremely detail-oriented, efficient, and organized with exceptional planning, prioritization, organizational, and project management skills• Excellent presentation and communication skills along with the ability to effectively convey complex ideas to both technical and non-technical audiences across all organizational levels• Able to establish and maintain effective, collaborative work relationships with diverse individuals, internally and externally• Creative, progressive, thought leadership with the ability to influence at all levels of the organization• Dedicated learner with a natural curiosity for consistent growth• Exhibits comfort, ease, and flexibility working in an extremely fast-paced ever-changing, deadline-driven environment• Cooperative team player with an upbeat, positive, “can-do” attitude!• Ability to work off-hours and provide on-call support as needed

Perks

Planet Fitness cares about you and your well-being. We offer a comprehensive benefits package to eligible employees which includes the core medical, dental, vision, life and disability as well as supplemental accident, hospital and critical illness coverage options. In addition, we are proud to offer eligible employees a generous time off program (including volunteer time), childcare reimbursement, paid parental leave, pet care reimbursement, tuition reimbursement, free Black Card membership, learning and development programs and a whole host of engagement activities. We offer a 401(k) Plan with safe harbor employer matching and an employee stock purchase plan. This role is also eligible to participate in an annual corporate bonus incentive program based on company financial and personal performance.

The salary for MA-based and NH-based employees hired into this role will be aligned with the range below. This is a good faith estimate, and the amount of base salary will correspond with a candidate’s professional experience, qualifications and internal equity.

Annual Base Salary Range: $90,000-$110,000

This role is also eligible to participate in an annual corporate bonus incentive program based on company financial and personal performance.

Note to Applicants: We have been made aware of an increasing number of hiring fraud schemes across numerous platforms. Planet Fitness never requires advance payments of any kind for computer equipment or any other purpose at the start of employment. Any request for you to provide payment information during the application process is part of a fraud scheme. Further, we recommend that you do not provide sensitive personal information (SSN, DOB, driver’s license number) as part of the initial application process.

Min

Max