Senior Analyst - Cybersecurity Risk & Compliance

Perform AI governance reviews for AI/ML use cases, GenAI integrations, third-party AI services, and agentic workflows by identifying potential security, privacy, and compliance risks.

Evaluate security risks and recommend appropriate controls aligned with organizational policies and industry best practices.

Support the implementation and operationalization of cybersecurity policies, standards, and control requirements across business and technology teams.

Partner with Product, Engineering, Cloud, Privacy, Legal, and other stakeholders to provide practical security guidance throughout project lifecycles.

Assist with readiness activities for security certifications and compliance frameworks by collecting evidence, validating controls, and supporting internal and external audits.

Review the effectiveness of implemented security controls and track remediation activities through to closure.

Support continuous monitoring activities by maintaining risk registers, dashboards, metrics, and compliance reporting.

Participate in security awareness initiatives by providing guidance on cybersecurity policies, secure development practices, and responsible AI usage.

Contribute to improving risk assessment methodologies, governance processes, templates, and documentation.

Identify opportunities to automate repetitive risk and compliance activities to improve operational efficiency.

Stay current with emerging cybersecurity threats, regulatory developments, cloud security trends, and AI governance practices.

3–6 years of experience in Cybersecurity Risk & Compliance, Information Security, Governance, Risk & Compliance (GRC), or related domains.

Experience conducting cybersecurity risk assessments, security reviews, compliance assessments, or control validation activities.

Working knowledge of cloud security concepts, preferably AWS, and common cloud security controls.

Familiarity with cybersecurity frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA, NIST 800-171, or similar frameworks.

Exposure to AI governance concepts, AI risk assessments, or emerging AI security considerations is desirable.

Understanding of common AI/ML security risks, including:

Data leakage

Prompt injection

Hallucination and model reliability

Third-party AI integrations

Bias and fairness considerations

Familiarity with software development and cloud technologies is desirable, including:

AWS

Kubernetes

Docker

CI/CD pipelines

GitHub

Strong analytical and problem-solving skills with the ability to evaluate security risks and recommend practical solutions.

Excellent written and verbal communication skills with experience working across cross-functional teams.

Relevant certifications such as Security+, CISA, CISM, CRISC, AWS Security Specialty, or similar certifications are desirable.

Key Responsibilities

Independently execute cybersecurity and AI risk assessments.

Review business initiatives for compliance with security policies and standards.

Support audit readiness and evidence collection activities.

Perform security reviews for new technologies and third-party services.

Track remediation plans and validate control implementation.

Maintain governance documentation, risk registers, and assessment artifacts.

Provide day-to-day cybersecurity guidance to business and engineering teams.

Contribute to continuous improvement of governance processes and automation initiatives.

At Freshworks, we have fostered an environment that enables everyone to find their true potential, purpose, and passion, welcoming colleagues of all backgrounds, genders, sexual orientations, religions, and ethnicities. We are committed to providing equal opportunity and believe that diversity in the workplace creates a more vibrant, richer environment that boosts the goals of our employees, communities, and business. Fresh vision. Real impact. Come build it with us.