Security Transformation Associate

Accenture; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Accenture India seeks a Security Transformation Associate to perform risk-based information security assessments across delivery projects and enterprise functions, ensuring ISO/IEC 27001 compliance and supporting security initiatives. You will promote a security-first culture through awareness programs and collaborate with cross-functional teams to uphold client and regulatory requirements.

The role emphasizes governance, risk management, and proactive security improvements, contributing to

Qualifications

• Must have bachelor’s degree in computer science or information security.
• Experience in risk-based internal assessments and ISO/IEC 27001.
• Familiarity with privacy regulations and data protection compliance.

Responsibilities

• Conduct risk-based information security assessments for delivery projects in India.
• Evaluate compliance with Accenture internal security policies and client requirements.
• Assist in audit readiness and regulatory compliance activities.
• Drive information security awareness initiatives for new joiners and project teams.
• Support client audits and certifications like ISO 27001.

Skills

Risk Management

Governance Risks & Compliance

Information Security Audit

Security Assessments/Audits/Risk Mgmt

ISO/IEC 27001 & NIST/SOC2

Security Control Testing & Evidence

Identify & Document Security Risks

Data Protection & Regulatory Privacy

Education

Bachelor's degree in Computer Science / Information Security

Tools

ISO27001 Lead Auditor

SSA E18 / SOC knowledge

GRC Tools

Security Awareness Sessions

Cloud Security & IAM

Job description

Job Title - Security Transformation Associate

Management Level: CL12 (Flexible to CL11 with 2 to 3 years of relevant experience)

Location: Mumbai

Must have skills:

• Risk Management, Governance Risks & Compliance, Information Security Audit
• Experience in information security assessments, audits, or risk management.
• Good understanding of ISO/IEC 27001 and other relevant standards (e.g., NIST, SOC2).
• Security control testing and evidence validation
• Ability to identify, assess, document, and clearly articulate security risks and findings
• Understanding of data protection, privacy, and regulatory compliance requirements

Good to have skills:

• Professional information security certification/s ISO27001 Lead Auditor, Security+, CISA etc. and knowledge of SSAE18(SOC)
• Exposure to GRC or audit management tools
• Experience in creating or delivering security awareness sessions
• Understanding of cloud security, access management, vulnerability management, incident management, and third-party risk
• Knowledge of privacy regulations, such as GDPR and India's DPDP Act

undefined Experience: 0 to 2 Years of Experience

Educational Qualification: Bachelor's degree in computer science, Information Security, or a related field.

Job Summary:

We are seeking a dedicated and detail-oriented Information Security Assessor to join our team. The candidate will play a critical role in conducting risk-based internal assessments for ATC India projects and enterprise-wide corporate functions (e.g., Workplace, HR, IT, Finance, Legal, Procurement) to evaluate and ensure compliance with ISO/IEC 27001 and internal security policies. This role also includes driving information security awareness initiatives for new joiners and project team members, promoting a strong culture of security within the organization.

Roles & Responsibilities:

Perform risk-based information security assessments for delivery projects across Accenture's India centers. Evaluate compliance with both Accenture's internal security policies and client-specific contractual requirements. Identified risks will directly contribute to safeguarding client data and ensuring contractual and regulatory compliance.Accenture holds the distinction of being one of the largest globally ISO/IEC 27001 certified organizations, and this role contributes to maintaining that prestigious certification. The assessor will support audit readiness and compliance by engaging in key activities such as:a. Conducting internal assessments across enterprise functions (e.g., Workplace, HR, IT, Finance, Legal, Procurement) to ensure adherence to ISO/IEC 27001 security controls.b. Performing risk assessments to identify potential security threats that could impact business objectives and tracking mitigation actions to closure.c. Driving innovative information security awareness initiatives to promote a security-first culture-ranging from new joiner orientations to interactive campaigns and knowledge-sharing sessions.Participate in scheduled internal assessments and initiatives to ensure ongoing compliance with regulatory and client-mandated security requirements beyond ISO 27001.Provide information security representation during client audits and assessments. Collaborate with project teams to ensure preparedness and demonstrate robust security practices, reinforcing client confidence and supporting ongoing business growth.

Professional & Behavioral Skills:

Excellent report writing, communication, and stakeholder management skills.Self-motivated and proactive with a continuous improvement mindset.Ability to work independently and manage multiple assessments in parallel.Collaborative approach with cross-functional teams.Passion for spreading security awareness and best practices.