Security Delivery Manager

Accenture PLC; Riyadh; On-site; SAR 350,000 - 520,000; Full time

Job summary

Accenture in Riyadh seeks a Cybersecurity Service Delivery Manager to lead SIEM logging and security monitoring enablement across enterprise environments. You will blend SIEM expertise with delivery leadership to onboard, normalize and validate security data for effective threat detection.

Collaborate with security, application, infrastructure and engineering teams to translate detection requirements into logging specs, drive onboarding waves, resolve data-quality issues and report delivery

Qualifications

• Proven experience with SIEM and security monitoring.
• Ability to lead delivery across complex environments.
• Strong collaboration with cross-functional teams.

Responsibilities

• Lead end-to-end SIEM delivery and onboarding.
• Define logging requirements and oversee data normalization.
• Provide clear reporting on progress, risks and outcomes.

Skills

SIEM

Security monitoring

Delivery leadership

Log ingestion

Stakeholder management

Data quality

Tools

Splunk

Job description

Join Accenture Security and play a key role in strengthening our clients' cyber defense capabilities.

As a Cybersecurity Service Delivery Manager, you will lead the delivery of SIEM logging and security monitoring enablement across complex enterprise environments. You will combine strong technical knowledge of SIEM and log management with delivery leadership, ensuring security-relevant data is onboarded, normalized and validated to effectively support threat detection and monitoring use cases.

You will work closely with security, application, infrastructure and engineering teams to translate detection and monitoring requirements into actionable logging requirements, drive structured onboarding waves, resolve data-quality challenges and provide stakeholders with clear visibility of delivery progress, risks and outcomes.

What You'll Do

SIEM & Logging Delivery

• Lead end-to-end delivery of log-source assessment, onboarding and validation into enterprise SIEM platforms, with Splunk preferred.
• Define and govern logging requirements aligned with security monitoring, detection and investigation use cases.
• Oversee log onboarding activities including source identification, ingestion, parsing, field extraction, normalization and validation.
• Assess log sources for quality, completeness, consistency and security value, identifying gaps and recommending remediation.
• Ensure required security events and fields are captured accurately and made available to monitoring and detection teams.

Technical & Delivery Leadership

• Provide technical direction and troubleshooting support for complex log ingestion, parsing, mapping and data-quality issues.
• Apply strong knowledge of common logging formats and protocols, including syslog, JSON, Windows Event Logs and application logs.
• Drive consistent approaches to data normalization and standardization across diverse technology environments.
• Understand how telemetry supports detection engineering and collaborate with detection teams to ensure logs meet defined use-case requirements.
• Coordinate dependencies across application, infrastructure, platform and cybersecurity teams to enable required logging.
• Lead delivery through batch-based, wave-based or phased onboarding approaches, balancing delivery priorities, dependencies and technical readiness.

Service Management & Governance

• Own delivery planning, progress tracking, risks, issues, dependencies and stakeholder reporting for assigned logging initiatives.
• Establish clear quality criteria and ensure onboarding outputs meet agreed technical and operational requirements.
• Produce high-quality assessments, onboarding documentation, status reporting and management-level updates.
• Facilitate working sessions with technical teams and stakeholders to resolve blockers and maintain delivery momentum.
• Identify opportunities to improve onboarding processes, logging standards, operational efficiency and monitoring coverage.
• Act as a trusted point of coordination between cybersecurity teams and technology stakeholders.

What You'll Need

• Strong hands-on understanding of SIEM technologies, preferably Splunk.
• Demonstrated experience with log onboarding, ingestion pipelines, parsing and field extraction.
• Strong understanding of security logging across operating systems, applications, network devices and security technologies.
• Knowledge of common log formats and protocols such as syslog, JSON and Windows events.
• Experience assessing and improving log quality, completeness and consistency.
• Experience defining logging requirements against security monitoring and detection use cases.
• Working knowledge of detection engineering and the role telemetry plays in effective security detections.
• Understanding of security-data normalization, standardization and mapping practices.
• Strong analytical and troubleshooting capabilities, particularly for ingestion and data-quality issues.
• Experience coordinating with application, infrastructure, platform and security teams.
• Demonstrated experience managing structured, phased or batch-based technology delivery.
• Strong documentation, reporting and presentation capabilities.
• Excellent stakeholder management and communication skills, with the ability to translate technical issues into clear business and delivery impacts.

Bonus Points If You Have

• Experience delivering SIEM or security-monitoring capabilities in large-scale enterprise environments.
• Experience with Splunk administration, SPL, data models or Common Information Model concepts.
• Exposure to SOC operations, threat detection, incident investigation or threat hunting.
• Experience working with cloud and hybrid environments.
• Familiarity with MITRE ATT&CK and security monitoring frameworks.
• Relevant cybersecurity, SIEM, Splunk or service-management certifications.
• Experience operating within a Managed Security Services environment.