Security Transformation Assoc Manager

Accenture PLC; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Accenture plc in Bengaluru seeks a Security Delivery Associate Manager with 10-12 years of experience in application security and consultancy. The role emphasizes OWASP Top 10, SANS Top 25, and experience with Invicti, AppScan, or Burp Suite.

Strong leadership and communication skills are required to drive risk reduction and security operations. You'll manage vulnerability remediation, generate compliance reports, and influence security controls.

Qualifications

• Proven experience in a cyber security, with a focus on consultancy.
• In depth understanding of OWASP Top 10/SANS Top 25 and exploitation components.
• Proficiency with Invicti or equivalent Application Security tools (e.g., HCL AppScan/Burp Suite).
• Certifications such as CISSP, CISM, CCSK or equivalent are desirable.
• Bachelor’s degree in Cyber Security, Information Technology, or a related field.
• Strong leadership and stakeholder management skills.
• Excellent verbal and written communication.
• Analytical problem-solving mindset.
• Ability to influence technical and non-technical stakeholders.
• Strong focus on operational excellence and risk reduction.
• OSCP or GX-PT knowledge.
• ITIL processes knowledge.
• ISO 27001/27K processes and controls knowledge.
• Scripting knowledge (Python/Powershell/Bash).

Responsibilities

• Prepare and deliver compliance reports to management, detailing the organization’s compliance status and areas for improvement.
• Manage application vulnerability identification, prioritization, tracking, and remediation.
• Provide remediation guidance for OWASP Top 10 and other application security findings.
• Conduct risk assessments and recommend compensating controls where remediation is not immediately feasible.
• Monitor vulnerability remediation SLAs and report risk posture to leadership.
• Audit internal operational processes and share report to management and identify improvements.
• Develop and maintain security documentation and reports.
• Engage with stakeholders for various security evaluation discussions and identify improvements.
• Review and monitor internal processes. Influence training plans to align with company goals.
• Review accuracy of security controls and share report.
• Perform PoC’s.
• Role Description: Work with cross-skilled security groups on various aspects of Security Operational functions.

Skills

Application Security

OWASP Top 10

SANS Top 25

Invicti

AppScan

CISSP

CISM

CCSK

Bachelor’s degree in Cyber Security

Leadership

Stakeholder management

Communication

Analytical thinking

Influence stakeholders

Operational excellence

Risk reduction

OSCP

GX-PT

ITIL processes

ISO 27001 controls

Python

PowerShell

Bash

Education

Bachelor’s degree in Cyber Security, Information Technology, or a related field

Tools

Invicti

HCL AppScan

Burp Suite

Job description

Role: Security Delivery Associate Manager

Level: 8

Location: Bengaluru

Experience: 10-12 years

Main Skill: Application Security

Must have Skills:

• Proven experience in a cyber security , with a focus on consultancy
• In depth understanding of OWASP Top 10/ SANS Top 25 and ability to demonstrate the different components of exploitation
• Proficiency with Invicti or equivalent Application Security tools like (HCL AppScan/Bursuite etc)
• Relevant certifications such as CISSP, CISM, CCSK or equivalent are highly desirable.
• Bachelor’s degree in Cyber Security, Information Technology, or a related field

• Strong leadership and stakeholder management skills

• Excellent verbal and written communication

• Analytical problem-solving mindset

• Ability to influence technical and non-technical stakeholders

• Strong focus on operational excellence and risk reduction

Good to Have Skills:

• Knowledge/Certifications- OSCP or GX-PT
• Knowledge on ITIL processes
• Knowledge on ISO 27K processes and controls
• Scripting knowledge (Python/Powershell/Bash)

Roles & Responsibilities:

• Prepare and deliver compliance reports to management, detailing the organization’s compliance status and areas for improvement

• Manage application vulnerability identification, prioritization, tracking, and remediation
• undefined
• Provide remediation guidance for OWASP Top 10 and other application security findings
• undefined
• Conduct risk assessments and recommend compensating controls where remediation is not immediately feasible.

• Monitor vulnerability remediation SLAs and report risk posture to leadership.
• undefinedAudit internal operational processes and share report to management and identify improvements Develop and maintain security documentation and reports Engage with stakeholders for various security evaluation discussions and identify improvements Review and monitor internal processes Influence training plans to align with company goals Review accuracy of security controls and share report Perform PoC’s

• Role Description:Work with cross skilled security groups on various aspects of Security Operational functions Work and facilitate Vulnerability and Compliance queries from Business from security scans and reports Conduct security audits of internal operational process Prepare and deliver compliance reports to management, the periodic status of the process health Provide standard process advice for SecOps/SOC teams Coordinate and perform: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST)Encourage reduction in recurring vulnerabilities· Drive Automation and operational efficiency improvementsDrive Positive stakeholder satisfaction and audit outcome

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.