Data Protect and InfoSec Compl Specialist

You will be responsible for conducting V&A Security Assessments for retained applications post-acquisition (PMI), identifying applicable security controls, and collaborating with technical teams and global stakeholders to drive implementation. - Review and assess application security controls for web, mobile (Android & iOS), and API-based applications coming through the Ventures & Acquisitions pipeline. - Evaluate security compliance of applications against Accenture policies and established industry standards (e.g., OWASP, NIST, ISO 27001). - Identify and document security control gaps and risks; recommend and track mitigation actions. - Collaborate with acquisition stakeholders, application owners, and internal security teams to support secure integration of acquired applications. - Contribute to continuous improvement of security assessment processes, templates, and standards. - Communicate technical security findings to both technical and non-technical stakeholders in a clear and actionable manner. Qualifications required: - Should have a good understanding of information security risk management. - Working knowledge in security frameworks like OWASP top 10, GDPR, ISO 27001, and SANS top 25. - Knowledge of common security attacks and threat vectors. - Basic knowledge of web applications, audit and assessments, security frameworks. - Good analytical skills. No additional details about the company were provided in the job description. You will be responsible for conducting V&A Security Assessments for retained applications post-acquisition (PMI), identifying applicable security controls, and collaborating with technical teams and global stakeholders to drive implementation. - Review and assess application security controls for web, mobile (Android & iOS), and API-based applications coming through the Ventures & Acquisitions pipeline. - Evaluate security compliance of applications against Accenture policies and established industry standards (e.g., OWASP, NIST, ISO 27001). - Identify and document security control gaps and risks; recommend and track mitigation actions. - Collaborate with acquisition stakeholders, application owners, and internal security teams to support secure integration of acquired applications. - Contribute to continuous improvement of security assessment processes, templates, and standards. - Communicate technical security findings to both technical and non-technical stakeholders in a clear and actionable manner. Qualifications required: - Should have a good understanding of information security risk management. - Working knowledge in security frameworks like OWASP top 10, GDPR, ISO 27001, and SANS top 25. - Knowledge of common security attacks and threat vectors. - Basic knowledge of web applications, audit and assessments, security frameworks. - Good analytical skills. No additional details about the company were provided in the job description.