Opportunity at
FreshworksSenior Analyst - Cybersecurity Risk & Compliance
Freshworks is hiring a senior analyst for its cybersecurity risk and compliance function. The role is full-time and on site. The group identifies and assesses cyber…
Career Tools
About This Role
Freshworks is hiring a senior analyst for its cybersecurity risk and compliance function. The role is full-time and on site. The group identifies and assesses cyber and compliance risk across the company, defines security standards, verifies that controls are followed, and collaborates with business and tech groups to lift the company's security stance. The analyst completes cyber and AI risk reviews independently, covering products, applications, infrastructure, suppliers and new product…
Job Description
Freshworks is hiring a senior analyst for its cybersecurity risk and compliance function. The role is full-time and on site. The group identifies and assesses cyber and compliance risk across the company, defines security standards, verifies that controls are followed, and collaborates with business and tech groups to lift the company's security stance.
The analyst completes cyber and AI risk reviews independently, covering products, applications, infrastructure, suppliers and new product initiatives. Reviews extend to AI use cases, generative features, outside AI vendors and agent-driven workflows, with attention to security, privacy and regulatory exposure. The analyst recommends suitable controls in line with company policy and common industry practice, helps embed policies and standards into everyday operations, and provides practical security advice throughout project lifecycles alongside product, engineering, cloud, privacy and legal colleagues. Audit readiness is another core task: gathering evidence, confirming that controls work as intended, and helping with internal and external audits for certification efforts. The analyst assesses how well controls function, follows remediation work until it is closed, keeps risk registers, dashboards and compliance reporting current, and helps refine the methods, templates and automation that make these processes run better.
Applicants should bring three to six years in cybersecurity risk, information security, or governance, risk and compliance, including experience running assessments and validating controls. Working knowledge of cloud security, ideally on AWS, is needed. Exposure to AI risk work is a bonus, and familiarity with software and cloud tooling is useful. The posting states no salary.
Responsibilities
- Run cybersecurity and AI risk assessments independently across products, infrastructure and vendors
- Review AI use cases, generative features, outside AI vendors and agent-driven workflows
- Check initiatives against security policy and standards
- Support audit readiness by gathering evidence and validating controls
- Review control effectiveness and track remediation to closure
- Maintain risk registers, dashboards and assessment records
- Offer everyday security advice to business and engineering groups
- Help improve governance processes and automate repetitive compliance tasks
Requirements
- Three to six years in cybersecurity risk, information security, or governance, risk and compliance
- Experience running risk assessments, security reviews or control validation
- Practical grasp of how cloud security works
- Strong analytical skills and the ability to propose practical solutions
- Clear written and spoken communication across cross-functional teams
Qualifications
- Familiarity with AWS environments and typical cloud controls (preferred)
- Familiarity with ISO 27001 and SOC 2, along with NIST CSF, PCI DSS, HIPAA and NIST 800-171
- Exposure to AI governance, AI risk assessment or AI security considerations
- Awareness of threats such as data leakage, prompt injection, hallucination, vendor AI integration issues and bias
- Familiarity with Kubernetes, Docker, CI/CD pipelines and GitHub
- Certifications like Security+, CISA, CISM, CRISC or AWS Security Specialty
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role based?
The posting does not specify a location. The listing is marked as on site.
What experience is required?
The posting asks for three to six years in cybersecurity risk, information security, or governance, risk and compliance.
Is the role full-time?
Yes, the listing is for a full-time position.
Is a salary stated?
No. The posting does not specify a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.