Risk and Compliance Analyst

Accenture PLC; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Accenture PLC in Bengaluru seeks a Risk and Compliance Analyst to join Intelligent Operations. You will collaborate with capability leads, process SMEs, and executives to develop, implement, and maintain plans for information security, data privacy, risk management, and compliance.

The role requires strong knowledge of ISO 27001, GDPR, and audit readiness, with at least 5 years in information security or compliance.

Qualifications

• Bachelor’s degree in a cybersecurity/IT-related field is required.
• Minimum 5 years of experience in information security, risk, or compliance roles.
• Strong knowledge of ISO/IEC 27001 and data privacy concepts.
• Experience with risk assessments, policy documentation, and audits.
• Excellent written and verbal communication, with attention to detail.

Responsibilities

• Perform risk assessments and develop practical mitigation strategies for processes and assets.
• Ensure compliance with GDPR, ISO 27001, SOC 2, NIST, and relevant frameworks.
• Maintain, update, and support security policies and compliance documentation.
• Coordinate audits, gather evidence, track observations, and close actions.
• Prepare security reports for senior management with KPIs and risk status.
• Collaborate with directors, leads, SMEs, and stakeholders to identify gaps.
• Support asset management plans and remediation timelines across the org.

Skills

Risk management

Information security

Data privacy

Audit readiness

Communication

Education

Bachelor's degree in Cybersecurity, IT, CS, or related field

Tools

Microsoft Office

Job description

Skill required:

Risk & Compliance - Risk Management

Designation:

Risk and Compliance Analyst

Qualifications:

Any Graduation

Years of Experience:

Minimum 5 years of experience

Intelligent Operations centers. Our 784,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries.

What would you do

The Risk & Compliance Analyst will collaborate with capability directors, leads, process SMEs, and the executive team to develop, implement, and maintain plans for information security, data privacy, risk management, and compliance. The role is responsible for supporting risk assessments, compliance reviews, policy documentation, security awareness, audit readiness, and organization asset management across business processes.

What are we looking for

Knowledge Requirements

• Thorough understanding of information security principles, risk management, compliance, and data privacy concepts.
• Understanding of ISO/IEC 27001 requirements; ISO certification in information security is preferred.
• Knowledge of networking protocols such as TCP/IP, DNS, HTTP, and VPN is preferred.

Required Qualifications

• Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum 5 years of experience in information security, risk and compliance, audit, cybersecurity, or a related IT role.

Preferred Certifications

• ISO/IEC 27001 certification or data privacy certification.
• CompTIA Security+.
• Certified Ethical Hacker (CEH).

Key Skills

• Analytical thinking and structured problem-solving.
• Strong written and verbal communication.
• Attention to detail and documentation accuracy.
• Ability to work under pressure and support incident or audit-related activities.
• Collaboration with cross-functional teams and senior stakeholders.
• Ability to manage multiple priorities, deadlines, and compliance deliverables.
• Proficient with Microsoft Office tools

Roles and Responsibilities

• Perform risk assessments and develop practical risk mitigation strategies for business processes, applications, and information assets.
• Ensure compliance with applicable regulations, standards, and frameworks such as GDPR, HIPAA, ISO/IEC 27001, SOC 2, and NIST.
• Maintain, update, and support implementation of security policies, procedures, standards, and compliance documentation.
• Responsible and accountable for information security administration and managing organization assets, including asset review and compliance tracking.
• Support internal and external security audits by preparing evidence, coordinating stakeholders, tracking observations, and supporting closure of audit actions.
• Prepare reports for senior management on security posture, risk status, compliance progress, incidents, key security metrics, and KPIs.
• Collaborate with capability directors, leads, process SMEs, and cross-functional teams to identify risks, control gaps, and process improvement opportunities.
• Support development of asset management plans and risk treatment actions aligned to business requirements.
• Track compliance activities, open risks, audit actions, and remediation timelines to ensure timely closure.
• Promote a security-conscious culture across the organization through training, awareness, and stakeholder engagement.

Risk Assessment & Compliance

• Perform risk assessments and develop risk mitigation strategies.
• Ensure compliance with regulations and frameworks such as GDPR, HIPAA, ISO/IEC 27001, SOC 2, and NIST.
• Maintain and update security policies, procedures, and documentation.

Security Awareness & Training

• Develop and deliver security awareness training for employees and relevant stakeholder groups.
• Support phishing simulation campaigns and social engineering awareness activities, where applicable.
• Promote secure behavior and a security-conscious culture across the organization.

Audit & Reporting

• Prepare reports for senior management on security posture, incidents, compliance status, and key risks.
• Support internal and external security audits, including evidence collection, stakeholder coordination, and action tracking.
• Track key security metrics, KPIs, compliance deliverables, and remediation progress.

Qualification

Any Graduation