Security Transformation Specialist

Accenture PLC; Karnataka; Presencial; INR 1.500.000 - 2.100.000; Jornada completa

Descripción de la vacante

Accenture PLC is seeking a Security Transformation Specialist to drive vulnerability and compliance programs across cloud and on-prem environments. You translate security standards into measurable controls, validate testable controls, and collaborate with distributed teams to remediate findings.

You will contribute to automation, reporting, governance and continuous improvement, acting as a technical SME for CSPM platforms, Qualys Policy Compliance and cloud-native security, while communicating

Formación

• Hands-on experience with CSPM platforms Wiz or Prisma Cloud.
• Strong expertise in Qualys Policy Compliance and remediation.
• Solid understanding of cloud-native security and OS-level security.
• Working knowledge of AWS, Azure and GCP.
• Networking and server administration knowledge, OSI model, encryption and security protocols.
• Ability to translate standards into testable controls and validation criteria.
• Excellent written and verbal communication for stakeholder discussions.
• Proven collaboration across distributed, cross-functional teams.

Responsabilidades

• Work with CSPM platforms and Qualys Policy Compliance to support control development and compliance activities.
• Translate security standards into control logic, test scenarios and validation criteria.
• Develop and validate cloud-native and OS security controls before production deployment.
• Present new controls in governance forums with clear evidence and impact.
• Investigate false positives, variances and scan inaccuracies; coordinate remediation.
• Collaborate with server, network, cloud, database and application teams to address findings.
• Provide remediation guidance and respond to questions on vulnerability patching and configuration changes.
• Act as a primary contact for vulnerability and compliance queries and coordinate resolution.
• Conduct periodic reviews with business stakeholders on risk posture and remediation progress.
• Work with vendors and internal teams to troubleshoot coverage gaps and ensure findings are accurate.
• Facilitate discussions on security-control gaps and practical remediation options.
• Perform user acceptance testing for controls and maintain evidence of results.
• Monitor scan coverage to ensure in-scope assets are evaluated per schedule.
• Prepare operational reports, dashboards and governance records.
• Support audit readiness through regular process and control reviews.

Herramientas

Wiz

Prisma Cloud

Qualys Policy Compliance

AWS

Azure

GCP

Python scripting

Shell scripting

Cloud security concepts

Network security concepts

Testable controls

Cross-functional collaboration

Descripción del empleo

Domain

Cloud Security, Vulnerability Management and Compliance

Role Summary

The Security Transformation Specialist supports vulnerability and compliance programs by translating security standards into measurable controls, developing and validating controls across cloud and on-premises environments, and driving remediation with business and technology stakeholders. The role serves as a technical subject-matter expert for vulnerability and compliance operations while contributing to automation, reporting, governance and continuous improvement.

Must-Have Skills

• Hands-on experience in cloud security and Cloud Security Posture Management (CSPM) platforms such as Wiz or Prisma Cloud.


• Strong expertise in Qualys Policy Compliance, including policy assessment, control validation and investigation of compliance findings.


• Good understanding of cloud-native security, operating-system-level security and security configuration standards.


• Working knowledge of AWS, Microsoft Azure and Google Cloud Platform (GCP).


• Solid networking and/or server administration knowledge, including the OSI model, encryption, common protocols, ports and network security concepts.


• Ability to interpret security standards and convert requirements into testable technical controls and scenarios.


• Excellent written and verbal communication skills, with the ability to explain technical findings to business and technology stakeholders.


• Strong collaboration skills and the ability to coordinate across geographically distributed, cross-functional teams.

Good-to-Have Skills

• Working knowledge of Python and/or shell scripting for automation, data handling and control validation.


• Experience with security-control development, cloud query languages, reporting and workflow automation.


• Relevant security certifications such as CCSP, CEH or CompTIA Security+.

Key Roles and Responsibilities

• Work with CSPM platforms and Qualys Policy Compliance to support control development, assessment and operational compliance activities.


• Interpret organizational security standards and translate requirements into control logic, test scenarios and measurable validation criteria.


• Develop, test and validate cloud-native and operating-system security controls before production deployment.


• Present new or enhanced controls in governance and review forums, clearly explaining the requirement, logic, test evidence, coverage and expected impact.


• Investigate false positives, approved variances, scan inaccuracies and control exceptions; document findings and coordinate corrective action.


• Partner with server, network, cloud, database and application teams to address vulnerabilities, configuration gaps and compliance findings.


• Provide remediation guidance and respond to stakeholder questions related to vulnerability patching and configuration changes required to align with organizational security standards.


• Act as a primary point of contact for vulnerability and compliance operational queries and coordinate issues through resolution.


• Conduct periodic reviews with business stakeholders covering risk posture, remediation progress, aging items, dependencies and blockers.


• Collaborate with tool vendors and internal platform teams to troubleshoot product issues, coverage gaps, scan failures and inaccurate findings.


• Facilitate discussions on security-control gaps and recommend practical remediation or control-enhancement options.


• Perform user acceptance testing for security-control enhancements using predefined scenarios and maintain clear evidence of results.


• Monitor assessment and scan coverage to help ensure in-scope infrastructure assets are evaluated according to the defined schedule.


• Prepare and maintain operational reports, dashboards, control evidence and governance records.


• Support governance and audit-readiness activities through regular reviews of processes, controls, evidence and operational performance.


• Identify opportunities…