Security Transformation Consultant (regular/senior) (She/He/They)

Accenture Poland; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Permanent employment contract

Private medical care

Life insurance

Employee Assistance Program

Worksmile platform

Job summary

Accenture Poland is seeking an experienced Cyber Security professional to drive security maturity across client landscapes, integrate security into SDLC, and guide architecture reviews from on-premises to cloud-native environments.

You will lead threat modeling, risk assessments, and governance efforts while collaborating with cross-functional teams to translate security into business outcomes.

Qualifications

• Several years of experience in cybersecurity consulting, application security, security architecture, DevSecOps, governance, or related discipline.
• Solid understanding of Secure SDLC concepts and ability to design or improve security processes and governance.
• Experience leading or supporting security maturity assessments and translating findings into transformation roadmaps.
• Strong knowledge of OWASP Top 10 and ASVS in security assessments and design guidance.
• Hands-on familiarity with at least one cloud platform (AWS, Azure, or GCP) to advise on secure design.

Responsibilities

• Lead and support security maturity assessments across applications, software delivery, infrastructure and enterprise environments.
• Design and improve Secure SDLC operating models, governance frameworks and assurance processes.
• Advise clients on security-by-design and shift-left security practices; translate principles into actionable requirements.
• Conduct security architecture reviews for end-to-end solutions across cloud and on-premises environments.
• Facilitate threat modeling and risk assessments for complex applications and enterprise programs.
• Define security requirements and governance mechanisms referencing OWASP ASVS and MITRE ATT&CK.

Skills

Cybersecurity consulting

Security maturity assessments

Secure SDLC

Threat modeling

Risk assessment

Cloud security

OWASP Top 10

OWASP ASVS

Security architecture reviews

Stakeholder management

Bilingual English/Polish

Tools

AWS

Azure

GCP

Job description

WHO WE ARE

The Cyber Security team, part of Accenture Security, supports organizations in building secure, resilient, and scalable security capabilities across complex enterprise technology landscapes — integrating security into software development, cloud adoption, digital transformation, and technology modernization so that security by design and security by default are reflected in how systems are actually built and operated, not only in policy.

WHO WE ARE

The Cyber Security team, part of Accenture Security, supports organizations in building secure, resilient, and scalable security capabilities across complex enterprise technology landscapes — integrating security into software development, cloud adoption, digital transformation, and technology modernization so that security by design and security by default are reflected in how systems are actually built and operated, not only in policy.

We act as trusted advisors to some of the world's leading organizations, helping them define pragmatic security operating models, improve security maturity, and align cybersecurity capabilities with their business and technology objectives. Working at the forefront of the industry means constant exposure to complex, high-stakes security challenges and the latest technologies — across banking, manufacturing, healthcare, retail, and public sector, each with its own regulatory context and technical scale.

As part of a global security leader, you work on engagements that span the full breadth of modern enterprise security — from securing AI-enabled systems and cloud-native architectures to embedding security into large-scale digital transformation programmed. The variety of clients, industries, and technology stacks.

THE WORK

• Lead and support security maturity assessments across applications, software delivery processes, infrastructure and enterprise environments, and define pragmatic transformation roadmaps.
• Design and improve Secure SDLC operating models, security governance frameworks and assurance processes for clients across industries.
• Advise clients on security-by-design and shift-left security practices, translating principles into actionable requirements across development, platform and engineering teams — and directly supporting those teams where needed.
• Conduct security architecture reviews for end-to-end solutions spanning legacy, hybrid, cloud-native and modern application environments, including platforms on AWS, Azure or GCP.
• Facilitate threat modeling and risk assessment activities for complex applications, distributed architectures and enterprise transformation programs.
• Assess security implications of application modernization, cloud transformation and technology migration initiatives, including challenges specific to on-premises and hybrid environments.
• Define security requirements, assurance processes and governance mechanisms for applications, platforms and enterprise environments, referencing frameworks such as OWASP ASVS, MITRE ATT&CK and relevant industry standards.
• Support development of software supply chain security capabilities, vulnerability management programs and secure engineering practices.
• Establish security metrics, reporting models and continuous improvement mechanisms to drive measurable progress in client security posture.
• Lead workshops with technical, operational, business and senior stakeholders, translating complex security risks into clear recommendations for decision makers.
• Act as a trusted advisor to clients, providing guidance on secure design principles, emerging security trends and practical risk-based decision making.

Flexible

The work location for this role may include a mix of working remotely, onsite at a client or in an Accenture office - depending on specific project circumstances.

With all our roles, there is some in-person time for collaboration, learning and building relationships with clients, peers, leaders, and communities. As an employer, we will be as flexible as possible to support your specific work/life needs.

WHAT’S IN IT FOR YOU?

• Work on international cybersecurity transformation program for some of the world's leading organizations — on network security challenges that go far beyond routine operations, into architecture, strategy, and large-scale modernization.
• Breadth you cannot get in-house. In a single year you see how organizations across banking, manufacturing, healthcare, retail, and public sector approach the same network security and Zero Trust challenges — and where they fail. That range, across cloud security, identity, application security, and network transformation, takes far longer to accumulate on a single internal team.
• The opportunity to move beyond network operations. If you have a strong network security foundation and want to develop into cloud security, Zero Trust architecture, AI security, or security consulting, this role is built for that transition.
• Room to set direction and grow as a trusted advisor. On most engagements you are the person defining what a modern, secure network architecture looks like for a client — leading discussions with architects, platform teams, and senior stakeholders, not maintaining someone else's rule set.
• Collaborate with a diverse team of over 150 cybersecurity experts in Poland and thousands across the globe, in an environment focused on innovation, continuous learning, and practical business outcomes.
• A wide catalogue of development opportunities: technical, soft-skills, and language training, e-learning platforms, GenAI training, and security certifications — open to everyone who wants to grow.

HERE'S WHAT YOU'LL NEED:

We are looking for someone who can navigate complex security landscapes end-to-end — a broad perspective and the ability to translate security into business outcomes matter as much as technical depth.

• Several years of experience in cybersecurity consulting, application security, security architecture, DevSecOps, security governance, or a related discipline.
• Basic understanding of Secure SDLC concepts, with the ability to design or improve security processes, governance frameworks, and operating models across software delivery.
• Experience leading or supporting security maturity assessments and translating findings into actionable transformation roadmaps for both technical and business stakeholders.
• Good working knowledge of application security principles, with practical application of OWASP Top 10 and OWASP ASVS in security assessments, architecture reviews, and secure design guidance.
• Hands-on familiarity with at least one cloud platform — AWS, Azure, or GCP — sufficient to assess architecture decisions, identify security gaps, and advise on secure design across cloud, hybrid, and on-premises environments.
• Experience facilitating threat modelling, security architecture reviews, and risk assessments for complex applications and distributed enterprise environments.
• Ability to define practical and scalable security requirements, assurance processes, and governance mechanisms across development, platform, and enterprise environments.
• Strong communication and stakeholder management skills — comfortable engaging with development and platform teams on day-to-day security topics, as well as leading workshops and presenting to senior audiences.
• Good proficiency in both Polish and English (minimum B2 level), as projects are delivered for clients in Poland and internationally.
• Leadership mindset with the ability to drive security initiatives and build trusted relationships with clients and cross-functional teams.

Seniority levels

Regular (approximately 3–5 years of relevant experience). Candidates at this level are expected to deliver defined workstreams — conducting network security assessments, supporting Zero Trust and cloud architecture reviews, and communicating findings to client technical teams. A solid network security foundation is expected, with active development toward cloud security, Zero Trust, and security advisory capabilities.

Senior (approximately 5+ years of relevant experience). Candidates at this level are expected to lead workstreams, provide technical direction, and mentor junior colleagues. This requires demonstrated depth in network security architecture, combined with real breadth across at least one adjacent domain — cloud security, Zero Trust, identity, or application security — and the standing to present and defend a position to senior client stakeholders up to CISO level.

If you are moving across from development, platform engineering, or an in-house security role, tell us what you have built and we will work out where you fit. That conversation happens in the interview, not in the CV screen.

BONUS POINTS IF YOU HAVE:

• Experience in enterprise security transformation programs or security operating model design.
• Practical knowledge of DevSecOps tooling and security integration within modern software delivery pipelines.
• Experience with AI governance, AI risk management or securing AI-enabled applications and services.
• Industry-recognized certifications in cybersecurity or cloud security.
• Experience working across multiple industries or in large-scale, complex enterprise environments.

WHAT WE OFFER

• Permanent employment contract.
• Individual support of a People Lead and a specific path of professional development, as well as the possibility of a session with a Coach.
• A wide training package (soft, technical, and language training offer, access to the e-learning platforms, Gallup test, GenAI training, possibility of co-financing courses, and certification).
• Employee Assistance Program - legal, financial, and psychological consultations.
• Accenture employees eligible for the Employee share purchase plan automatically become eligible for quarterly dividends if they own company shares.
• Paid employee referral program.
• Private medical care, life insurance.
• Access to the Worksmile platform (possibility of using a wide range of products and services, including the Multisport card).

WHAT WE BELIEVE

Accenture does not discriminate employment candidates on the basis of race, religion, color, sex, age, disability, national origin, political beliefs, trade union membership, ethnicity, denomination, sexual orientation or any other basis impermissible under Polish law.

All our leaders are committed to building a better, stronger and more durable company for future generations to create positive, long-lasting change. Inclusion and diversity are fundamental to our culture and core values. Our rich diversity makes us more innovative and creative, which helps us better serve our clients and our communities.

Our position as partner to many of the world’s leading businesses, organizations and governments affords us both an extraordinary opportunity and a tremendous responsibility to make a difference. Sustainability is one of our greatest responsibilities, which we embed it into everything we do and for everyone we work with.