Data Protect & InfoSec Compl Spec

Accenture in India; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Accenture in India is seeking a security professional to conduct V&A security assessments for retained applications post-acquisition, identify applicable controls, and coordinate with technical teams and global stakeholders to drive secure integration. The role requires 5–7 years of experience, strong knowledge of security frameworks, and effective communication across teams and time zones.

A bachelor's degree in engineering is required.

Qualifications

• Should have a good understanding of information security risk management.
• Experience in application security risk assessment and evaluating security controls.
• Familiarity with OWASP, NIST, ISO 27001 and GDPR is desirable.
• Strong communication and collaboration skills, and ability to work with global teams.

Responsibilities

• Review and assess application security controls for web, mobile, and API-based applications in the Ventures & Acquisitions pipeline.
• Evaluate security compliance against Accenture policies and industry standards (OWASP, NIST, ISO 27001).
• Identify and document security control gaps and risks; recommend and track mitigations.
• Collaborate with acquisition stakeholders, application owners, and internal security teams to support secure integration of acquired apps.
• Contribute to continuous improvement of security assessment processes, templates, and standards.
• Communicate technical security findings to both technical and non-technical stakeholders clearly.

Skills

Information security risk management

Application Security Risk Assessment

Security Control Evaluation

Communication skills

MS Office (Excel, Word, PowerPoint)

Self-motivation / Team player

Stakeholder management

Culturally diverse team

Education

Bachelor’s Degree in Engineering – B.Tech/ B.E in Computer Science, Information Technology

Job description

• Should have a good understanding of information security risk management.
• Application Security Risk Assessment
• Security Control Evaluation
• Good communication and collaboration skills.
• Good knowledge of MS Office applications (Excel; Word; PowerPoint).
• Self-motivated, team player who also works well independently.
• Understand and work with a culturally diverse team.

Must have skills:

• Should have a good understanding of information security risk management.
• Application Security Risk Assessment
• Security Control Evaluation
• Good communication and collaboration skills.
• Good knowledge of MS Office applications (Excel; Word; PowerPoint).
• Self-motivated, team player who also works well independently.
• Strong stakeholder management skill
• Understand and work with a culturally diverse team.

Good to have skills:

• Security certificates such as CISA, CISSP.
• Experience in application integration with Azure AD.
• Should be open to flexible working hours to support global teams across time zones.

Experience:

Minimum 5-7 year(s) of experience is required

Educational Qualification:

Bachelor’s Degree in Engineering – B.Tech/ B.E in Computer Science, Information Technology.

Job Summary:

The role involves conducting V&A Security Assessments for retained applications post-acquisition (PMI), identifying applicable security controls, and collaborating with technical teams and global stakeholders to drive implementation.

Roles & Responsibilities:

• Review and assess application security controls for web, mobile (Android & iOS), and API-based applications coming through the Ventures & Acquisitions pipeline.
• Evaluate security compliance of applications against Accenture policies and established industry standards (e.g., OWASP, NIST, ISO 27001).
• Identify and document security control gaps and risks; recommend and track mitigation actions.
• Collaborate with acquisition stakeholders, application owners, and internal security teams to support secure integration of acquired applications.
• Contribute to continuous improvement of security assessment processes, templates, and standards.
• Communicate technical security findings to both technical and non-technical stakeholders in a clear and actionable manner.

Professional & Technical Skills:

• Should have a good understanding of information security risk management.
• Working knowledge in security frameworks like OWASP top 10, GDPR, ISO 27001, and SANS top 25
• Knowledge of common security attacks and threat vectors
• Basic knowledge of web applications, audit and assessments, security frameworks
• Good analytical skills.