Company Description

Freshworks makes it fast and easy for businesses to delight their customers and employees. We do this by taking a fresh approach to building and delivering software that is affordable, quick to implement, and designed for the end user. Headquartered in San Mateo, California, Freshworks has a global team operating from 13 global locations to serve more than 65,000 companies -- from startups to public companies – that rely on Freshworks software-as-a-service to enable a better customer experience (CRM, CX) and employee experience (ITSM). 

Freshworks’ cloud-based software suite includes Freshdesk (omni-channel customer support), Freshsales (sales automation), Freshmarketer (marketing automation), Freshservice (IT service desk), Freshchat (AI-powered bots), supported by Neo, our underlying platform of shared services.

Freshworks is featured in global national press including CNBC, Forbes, Fortune, Bloomberg and has been a BuiltIn Best Place to work in San Francisco and Denver for the last 3 years. Our customer ratings have earned Freshworks products TrustRadius Top Rated Software ratings and G2 Best of Awards for Best Feature Set, Best Value for the Price and Best Relationship. 

Job Summary

The Risk & Compliance function is responsible for assessing security and compliance risks to the organization, establishing security standards, ensuring compliance against those standards across all internal groups and domains, and driving information security cultural awareness across the Organization.

We are looking for a passionate and self-driven professional to join our Risk & Compliance team to help align Infosec activities to business goals, manage risk effectively, and stay on top of compliance. 

Role Expectation

• Responsible for enumerating cyber risks as applicable to the business.
• Identify, design, implement, and operationalize the control requirements for complying with various security frameworks and certifications.
• Engage with multiple stakeholders across engineering, product management, and business to drive the risk & compliance initiatives.
• Review and report on the adherence to controls and risk exposure periodically to the management.
• Implement governance processes to automate and continuously monitor information security controls, exceptions, risks. Develop reporting metrics, dashboards, and evidence artifacts.
• Identifying and implementing continuous improvement initiatives and industry best practices.
• Proactively identify changing regulatory requirements and appropriately align the product/enterprise infrastructure to accommodate these changes.
• Develop and maintain an information security awareness program that effectively motivates desired behaviors.

• 5-7 years of experience in the Risk & Compliance space viz. Performing quantified risk assessments, defining security standards, and managing information security processes.
• Work experience or conceptual understanding of AWS cloud platform to define controls for the cloud environment and suggest best practices.
• Working experience or conceptual understanding of the FAIR methodology risk assessments or Quantified risk assessments.
• Have a deep understanding of security control frameworks such as ISO27001, PCI DSS, HIPAA, SOC 1/2, NIST Cyber Security Framework, NIST800-171, and the Cloud Compliance Framework.
• Demonstrate deep knowledge of data privacy, data handling/protection, data classification, and data protection laws.
• Ability to build relationships, influence others, instill accountability, and get results.
• Ability to thrive in a dynamic, fast-paced environment taking up multiple responsibilities.
• Excellent problem solving, interpersonal, and communication skills.
• Be a team player and a go-getter and thrive for success.

At Freshworks, we are creating a global workplace that enables everyone to find their true potential, purpose, and passion irrespective of their background, gender, race, sexual orientation, religion and ethnicity. We are committed to providing equal opportunity for all and believe that diversity in the workplace creates a more vibrant, richer work environment that advances the goals of our employees, communities and the business.