Security Transformation Associate

About the Role

We are seeking a dedicated and detail-oriented Information Security Assessor to join our team. The candidate will play a critical role in conducting risk-based internal assessments for ATC India projects and enterprise-wide corporate functions to evaluate and ensure compliance with ISO/IEC 27001 and internal security policies. This role also includes driving information security awareness initiatives for new joiners and project team members, promoting a strong culture of security within the organization.

Key Responsibilities

• Perform risk-based information security assessments for delivery projects across Accenture’s India centers.
• Evaluate compliance with Accenture's internal security policies and client-specific contractual requirements.
• Support audit readiness and compliance by engaging in key activities such as:
• Conducting internal assessments across enterprise functions (e.g., Workplace, HR, IT, Finance, Legal, Procurement) to ensure adherence to ISO/IEC 27001 security controls.
• Performing risk assessments to identify potential security threats and tracking mitigation actions to closure.
• Driving information security awareness initiatives to promote a security-first culture—ranging from new joiner orientations to interactive campaigns and knowledge-sharing sessions.
• Participate in scheduled internal assessments and initiatives to ensure ongoing compliance with regulatory and client-mandated security requirements beyond ISO 27001.
• Provide information security representation during client audits and assessments.
• Collaborate with project teams to ensure preparedness and demonstrate robust security practices.

Requirements & Tech Stack

• Risk Management
• Governance Risks & Compliance (GRC)
• Information Security Audit
• Experience in information security assessments, audits, or risk management.
• Good understanding of ISO/IEC 27001 and other relevant standards (e.g., NIST, SOC2).
• Security control testing and evidence validation.
• Ability to identify, assess, document, and clearly articulate security risks and findings.
• Understanding of data protection, privacy, and regulatory compliance requirements.

Qualifications

• Bachelor’s degree in computer science, Information Security, or a related field.

Additional Information

Management Level: CL12 (Flexible to CL11 with 2 to 3 years of relevant experience)

Location: Mumbai

Good to have skills:

• Professional information security certification/s like ISO27001 Lead Auditor, Security+, CISA, and knowledge of SSAE18(SOC).
• Exposure to GRC or audit management tools.
• Experience in creating or delivering security awareness sessions.
• Understanding of cloud security, access management, vulnerability management, incident management, and third-party risk.
• Knowledge of privacy regulations, such as GDPR and India’s DPDP Act.

Professional & Behavioral Skills

• Excellent report writing, communication, and stakeholder management skills.
• Self-motivated and proactive with a continuous improvement mindset.
• Ability to work independently and manage multiple assessments in parallel.
• Collaborative approach with cross-functional teams.
• Passion for spreading security awareness and best practices.