Lead - IT Product Manager

Company Description

Organizations everywhere struggle under the crushing costs and complexities of solutions that promise to simplify their lives. To create a better experience for their customers and employees. To help them grow. Software is a choice that can make or break a business. Create better or worse experiences. Propel or throttle growth. Business software has become a blocker instead of ways to get work done.

Theres another option. Freshworks. With a fresh vision for how the world works. At Freshworks, we build uncomplicated service software that delivers exceptional customer and employee experiences. Our enterprise-grade solutions are powerful, yet easy to use, and quick to deliver results. Our people-first approach to AI eliminates friction, making employees more effective and organizations more productive. Over 72,000 companies, including Bridgestone, New Balance, Nucor, S&P Global, and Sony Music, trust Freshworks customer experience (CX) and employee experience (EX) software to fuel customer loyalty and service efficiency. And, over 4,500 Freshworks employees make this possible, all around the world. Fresh vision. Real impact. Come build it with us.

The IT Compliance function is responsible for ensuring the organizations technology systems, infrastructure, and data adhere to relevant regulations, legal requirements, and internal policies. It includes assessing, developing, implementing, and monitoring controls and processes to mitigate risks, maintain audit readiness, and safeguard operational integrity.

We are seeking a motivated and experienced Lead IT Product Manager to help enable the next generation of IT compliance. This role requires a strong foundation in control implementation, risk management, and audit collaboration.

• Risk Management Framework: Help maintain and continuously improve the IT risk management framework, including policies and procedures.
• IT Risk Assessments: Conduct assessments to identify, evaluate, and mitigate risks across systems, infrastructure, and third-party vendors.
• Governance Frameworks: Support the implementation of IT governance frameworks such as COBIT, ISO 27001, and ITIL.
• Compliance Monitoring: Monitor adherence to regulatory requirements (e.g., GDPR, SOX, HIPAA) and internal controls.
• Risk and Control Documentation: Collaborate with IT and business units to document risks, controls, and mitigation strategies.
• Remediation Tracking & Reporting: Track and report on efforts to address identified IT risks or control deficiencies.
• Policy Development & Review: Assist in developing and reviewing key IT policies, including information security, acceptable use, and data classification.
• Audit Support: Prepare documentation and provide support for internal and external IT audits.
• Risk Register Management: Maintain an up-to-date risk register and ensure accurate, timely reporting to senior management.
• SOC Reports: Review, understand, and be able to explain the SOC reports and concepts.
• Continuous Learning: Stay current with emerging IT risks, trends, threats, and regulatory changes.
• Education and Enablement: Partner with functional areas to ensure that they understand their responsibilities regarding data security and regulatory adherence.
• SDLC Review: Assess SDLC projects and provide feedback on process improvements.

• 3-8 years in IT risk management, IT audit, information security, or governance.
• Strong understanding of risk assessment methodologies, governance frameworks, and regulatory compliance.
• Proven success in implementing controls, including for ITGC and ITAC.
• Proficiency in reviewing and communicating SOC reports and procedures.
• Expertise corresponding with internal and external audit teams.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication, across various functional areas and layers of the organization.
• Ability to collaborate with technical and non-technical stakeholders.
• Detail-oriented with strong organizational skills.
• Desire for process efficiency and continuous improvement, including within the SDLC methodology.

• Hands-on experience GRC tools such as Auditboard, RSA Archer, ServiceNow GRC, etc.
• Working and/or audit experience in SaaS applications like Netsuite, Salesforce, Workday, PowerBI, Blackline, AWS, etc.

At Freshworks, we have fostered an environment that enables everyone to find their true potential, purpose, and passion, welcoming colleagues of all backgrounds, genders, sexual orientations, religions, and ethnicities. We are committed to providing equal opportunity and believe that diversity in the workplace creates a more vibrant, richer environment that boosts the goals of our employees, communities, and business. Fresh vision. Real impact. Come build it with us.

Locations: Chennai, India