Data Protect & InfoSec Compl Spec

Data Protect & InfoSec Compl Spec

Job Description Template

Job Description for: Information Security Assessment

Position Title: Security Consultant

Location: Chennai / Mumbai / Bangalore/Hyderabad /Pune

Employment Type: Full Time

Must have skills:

• Responsible for end-to-end audit execution including planning, fieldwork, workpaper documentation, leading audit meetings, reporting, and follow-ups; ensuring that methodologies governing internal audits are followed.
• In-Depth Knowledge on Vulnerability Management & Infrastructure Security Basic knowledge on server configuration, Network configuration and Cloud configuration.  
• Must have worked on Vulnerability Assessment Tools like QualysGuard, Nessus, nmap etc.
• Good understanding on cloud providers like AWS, Azure, Google security controls
• Good in-depth reporting and analytical skills.
• Good  time management skills to manage day-to-day work progress and ensure timely and high-quality deliverables
• Conduct research on Responsible AI – policies, principles, issues, risk identification, risk remediation, regulatory requirements, latest trends etc.

Good to have skills :

• Cloud Certifications (Azure / AWS / GCP)
• Knowledge of cybersecurity, vulnerability assessment, risk remediation etc.
• Good communication skills (Written & Oral) Detailed Understanding on technical and process-based risk assessments Knowledge on endpoint security processes and products.

Experience:

• Minimum of 6 to 8 years of experience in IT auditing, information security, or related technical role focusing on compliance activities.
• Experience conducting IT external and internal audits or assessments, preferably for a global organization.
• Strong IT knowledge in infrastructure technologies (networking, data centers and hosting, virtualization, cloud etc.), application development and support, and emerging technologies.

Educational Qualification:

• Bachelor’s or Master degree in Engineering (Computer Science, Information Technology, or related field).

About CF/S&C

Corporate Functions include Human Resources, Finance, Legal, Marketing Communications, and Workplace Solutions—that power Accenture's people across industries and functions to keep our business leading in the New. Join the heart and soul of Accenture, partnering with our extraordinary people to bring innovation into every organization. 

About Accenture: 

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, the company offers Strategy and Consulting, Song (Interactive), Technology and Operations services—all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. With net revenues of $64 billion for 2023, their 774,000+ employees deliver on the promise of technology and human ingenuity every day, serving clients in more than 49 countries and over 200 cities.

Job Summary:

• Oversee the entire information security assessment process.
• Conduct detailed security assessments, including vulnerability assessments, penetration testing, and configuration reviews.
• Review compliance with internal policies, industry standards, and regulatory requirements.
• Gather and analyze data, perform technical evaluations, and document findings.
• Ensure the security of our organization systems by identifying and mitigating security risks.
• Collaborate with cross-functional teams to ensure the successful delivery of Security Services projects.
• Provide technical guidance and mentorship to junior team members.
• Stay up to date with the latest security trends and technologies to ensure the continued improvement of our Security Services offerings.
• Ensure that the assessment is aligned with relevant compliance standards, legal requirements, and regulations (e.g., ISO 27001, GDPR, PCI-DSS).
• Conduct security risk assessments and technical audits across systems, networks, and applications.
• Perform vulnerability scanning using Nessus and analyze results to identify, prioritize, and recommend mitigation steps.
• Evaluate the effectiveness of security controls and support remediation initiatives.
• Align security assessments with recognized frameworks such as NIST, ISO/IEC 27001, COBIT, and ITIL.
• undefined
• undefined
• undefinedProfessional & Technical Skills:Certifications such as ISO 27001, Certified Ethical Hacker (CEH) or Security +Possession of a relevant professional certification (CISA, CISM, CISSP, CCSK) is preferred.Job Qualification:Minimum of 6 to 8 years of experience in IT auditing, information security, or related technical role focusing on compliance activities. Should have good understanding of information security risk management. Working knowledge in ISO 27001 Standard. Understanding of ITIL processes.
  Additional Information:
  
  Ability to follow company security policies.Awareness of security threats and practice