Must have skills:
- Should have a good understanding of information security risk management.
- Application Security Risk Assessment
- Security Control Evaluation
- Good communication and collaboration skills.
- Good knowledge of MS Office applications (Excel; Word; PowerPoint).
- Self-motivated, team player who also works well independently.
- Strong stakeholder management skill
- Understand and work with a culturally diverse team.
Good to have skills:
- Security certificates such as CISA, CISSP.
- Experience in application integration with Azure AD.
- Should be open to flexible working hours to support global teams across time zones.
Experience: Minimum 5-7 year(s) of experience is required
Educational Qualification: Bachelor's Degree in Engineering – B.Tech/ B.E in Computer Science, Information Technology.
Job Summary: The role involves conducting V&A Security Assessments for retained applications post-acquisition (PMI), identifying applicable security controls, and collaborating with technical teams and global stakeholders to drive implementation.
Roles & Responsibilities:
- Review and assess application security controls for web, mobile (Android & iOS), and API-based applications coming through the Ventures & Acquisitions pipeline.
- Evaluate security compliance of applications against Accenture policies and established industry standards (e.g., OWASP, NIST, ISO 27001).
- Identify and document security control gaps and risks; recommend and track mitigation actions.
- Collaborate with acquisition stakeholders, application owners, and internal security teams to support secure integration of acquired applications.
- Contribute to continuous improvement of security assessment processes, templates, and standards.
- Communicate technical security findings to both technical and non-technical stakeholders in a clear and actionable manner.
Professional & Technical Skills:
- Should have a good understanding of information security risk management.
- Working knowledge in security frameworks like OWASP top 10, GDPR, ISO 27001, and SANS top 25
- Knowledge of common security attacks and threat vectors
- Basic knowledge of web applications, audit and assessments, security frameworks
- Good analytical skills.
