Senior Analyst - Cybersecurity Risk & Compliance

About the role

Freshworks is looking for a professional to manage cybersecurity risk and compliance across the organization. You will work with internal teams to evaluate security standards and ensure that business initiatives remain protected as the company adopts new AI technologies.

Key facts

What you'll do

• Perform risk assessments for products, infrastructure, vendors, and new initiatives.
• Conduct governance reviews for AI and machine learning use cases, including third-party AI services and agentic workflows.
• Recommend security controls that align with company policies and industry standards.
• Help operationalize security policies across various business and engineering departments.
• Partner with Legal, Privacy, Product, and Cloud teams to provide security guidance throughout project lifecycles.
• Manage audit readiness by collecting evidence and validating controls for security certifications.
• Monitor risk registers and track remediation efforts until completion.
• Improve governance documentation and identify ways to automate compliance tasks.

Requirements

• 3 to 6 years of experience in GRC, Information Security, or Cybersecurity Risk & Compliance.
• Proven ability to execute security reviews, compliance assessments, and control validations.
• Working knowledge of cloud security, specifically within AWS environments.
• Familiarity with frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA, or NIST 800-171.
• Strong analytical skills to evaluate risks and propose practical solutions.
• Excellent communication skills for working with cross-functional teams.

Nice to have

• Experience with AI governance, AI risk assessments, and understanding risks like prompt injection, data leakage, model reliability, and bias.
• Familiarity with software development and cloud tools including Kubernetes, Docker, CI/CD pipelines, and GitHub.
• Relevant professional certifications such as CISA, CISM, CRISC, Security+, or AWS Security Specialty.

Skills & tools

• AWS
• Kubernetes
• Docker
• CI/CD pipelines
• GitHub
• ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA, NIST 800-171

Practical notes

Freshworks is an equal opportunity employer committed to a diverse workplace. The company serves nearly 75,000 customers including Sony Music, S&P Global, and Bridgestone.