Security Compliance, Audit & Technical Architecture Manager

We Are

Accenture Security helps organizations prepare, protect, detect, respond, and recover along all points of the security lifecycle. Cybersecurity challenges are different for every business in every industry. Leveraging our global resources and advanced technologies, we create integrated, turnkey solutions tailored to our clients’ needs across their entire value chain. Whether we’re defending against known cyberattacks, detecting and responding to the unknown, or running an entire security operations center, we will help companies build cyber resilience to grow with confidence.

Our team of the security sector’s brightest people use the coolest tech to out-hack the hackers and help clients build resilience from within. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.

Passionate about security, love what you do and have a genuine desire to outsmart the bad guys. You have the experience to analyze a clients’ security posture, anticipate security requirements and help find right-sized solutions based on industry leading practices. You have a proven track record working successfully in a fast-paced, team-oriented environment. You’re a creative, analytical problem solver with above average documentation skills who can speak to both technical and non-technical audiences.

Can apply deep security skills to design, build and protect enterprise systems, applications, data, assets and people for Accenture and our clients. You are eager to put your skills to use by helping us help our clients inject security at every level of their organization.

• Lead and execute
• Plan and execute control testing cycles (design effectiveness and operating effectiveness) across IT general controls (ITGCs), application controls, and regulatory controls for frameworks including SOX, SOC 1/2, ISO 27001, NIST CSF, CMMC, GDPR, CCPA, HIPAA, and others.

• Assess control gaps, define remediation roadmaps, build evidence libraries, and prepare clients for internal and external audits — including Big 4 and regulatory examinations.

• Evaluate and advise on the security and compliance posture of multi-platform architectures spanning cloud (AWS, Azure, GCP), enterprise applications (SAP, Salesforce, Service Now), data platforms, and hybrid infrastructure.

• Review and test IAM controls including role-based access control (RBAC), privileged access management (PAM), MFA enforcement, access certification cycles, and joiner/mover/leaver processes against regulatory and audit requirements.

• Contribute to integrated risk and compliance programs, including policy development, risk assessments, control mapping, and evidence collection. Support Third-Party Risk Management (TPRM) assessments for Tier 1 vendors.
• Translate regulatory requirements into actionable technical controls and architecture recommendations for client engineering and security teams.
• Produce high-quality audit work papers, findings reports, gap analyses, and management presentations.
• Mentor junior analysts and consultants; contribute to proposals, client relationships, and internal practice development.

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.

• Minimum of 8 years of total experience in cybersecurity, IT audit, compliance, or GRC consulting — with at least 5 years focused on controls testing and audit readiness.
• Minimum 5 of years of demonstrated hands-on experience testing ITGCs, application controls, and regulatory controls across at least two major frameworks (SOX, SOC 2, ISO 27001, NIST CSF, CMMC, HIPAA, GDPR, or similar).
• Minimum 5 of years of technical architecture experience across multiple platforms — cloud infrastructure (AWS, Azure, or GCP), enterprise applications, data governance platforms, and identity/access management systems.
• Minimum 5 of years of experience with evidence management, audit…