Freshworks: Senior Analyst - Cybersecurity Risk & Compliance — Chennai, India

About Freshworks

Freshworks develops cloud-based software for customer and employee experiences. Its product range includes customer support, sales and marketing automation, chat and IT service management. The employer names Freshdesk, Freshsales, Freshmarketer, Freshservice and Freshchat, supported by shared platform services. These applications address different operational needs, from managing customer conversations and sales activity to helping employees obtain IT services. The business emphasises software designed for end users and straightforward implementation.

The position and its setting

Freshworks lists Senior Analyst - Cybersecurity Risk & Compliance in Chennai, India, under reference P-1003465_1. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Employment type: Full-time
• Employer listing date: 31 July 2026
• Brands: Freshworks

Responsibilities and work described

• The Cybersecurity Risk & Compliance function is responsible for identifying, assessing, and managing cybersecurity and compliance risks across the organization
• The team establishes security standards, validates adherence to security controls, and partners with business and technology teams to strengthen the organization's security posture
• As a Senior Analyst in the Cybersecurity Risk & Compliance team, you will independently execute cybersecurity risk assessments, compliance reviews, and governance activities while supporting the organization's evolving AI adoption
• Collaboration: with Product, Engineering, Legal, Privacy, and business stakeholders to identify risks, recommend appropriate controls, and ensure security requirements are incorporated into business initiatives
• Role Expectations
• Research / execution: cybersecurity risk assessments for products, applications, infrastructure, vendors, and business initiatives, including New Product Initiatives (NPIs)
• Execution: AI governance reviews for AI/ML use cases, GenAI integrations, third-party AI services, and agentic workflows by identifying potential security, privacy, and compliance risks
• Evaluate security risks and recommend appropriate controls aligned with organizational policies and industry best practices
• Support: the implementation and operationalization of cybersecurity policies, standards, and control requirements across business and technology teams
• Partner with Product, Engineering, Cloud, Privacy, Legal, and other stakeholders to provide practical security guidance throughout project lifecycles
• Support: readiness activities for security certifications and compliance frameworks by collecting evidence, validating controls, and supporting internal and external audits
• Review: the effectiveness of implemented security controls and track remediation activities through to closure
• Support: continuous monitoring activities by maintaining risk registers, dashboards, metrics, and compliance reporting
• Participate in security awareness initiatives by providing guidance on cybersecurity policies, secure development practices, and responsible AI usage
• Contribution: to improving risk assessment methodologies, governance processes, templates, and documentation
• Identify opportunities to automate repetitive risk and compliance activities to improve operational efficiency

Essential requirements and candidate background

• 3–6 years of experience in Cybersecurity Risk & Compliance, Information Security, Governance, Risk & Compliance (GRC), or related domains
• Experience conducting cybersecurity risk assessments, security reviews, compliance assessments, or control validation activities
• Knowledge: cloud security concepts, preferably AWS, and common cloud security controls
• Familiarity: cybersecurity frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA, NIST 800-171, or similar frameworks
• Understanding: common AI/ML security risks, including:
• Data leakage
• Prompt injection
• Hallucination and model reliability
• Third-party AI integrations
• Bias and fairness considerations
• AWS
• Kubernetes
• Docker
• CI/CD pipelines
• GitHub
• Analytical and problem-solving skills with the ability to evaluate security risks and recommend practical solutions
• Written and verbal communication skills with experience working across cross-functional teams

Preferred experience and additional strengths

• Exposure: AI governance concepts, AI risk assessments, or emerging AI security considerations is desirable
• Familiarity: software development and cloud technologies is desirable, including:
• Relevant certifications such as Security+, CISA, CISM, CRISC, AWS Security Specialty, or similar certifications are desirable

Location, schedule and contract conditions

• Work arrangement: On-site
• Advertised location: Chennai, India

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Senior Analyst - Cybersecurity Risk & Compliance vacancy is not an offer for reference P-1003465_1; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Freshworks

Applications follow the official employer page linked below.

Open the official Freshworks posting below and match the title and reference P-1003465_1.

Compare your qualifications and experience with the essential conditions for the Chennai, India position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: Kubernetes

Kubernetes references can cover deploying workloads, managing configuration or operating a cluster. Explain which of those you did, how the application was packaged and how you investigated failures or verified a release.

Relevant skills

• Kubernetes
• CI/CD
• Docker
• AWS
• AI/ML
• ISO
• AI
• cybersecurity
• audit
• compliance
• stakeholder management