Risk and Compliance Senior Analyst

Risk and Compliance Analyst works with the Application service delivery organization and other compliance related functions to help: -Perform audits/reviews to assess risks in Infrastructure Management and Application development and maintenance service environment - Manage risk in Application development and maintenance service to an acceptable level - increase the level of awareness of and compliance with policy and process related matters - support successful completion of various external compliance certification programs and internal compliance assessments - introduce continual improvement including lessons learned from matters requiring intervention This successful candidate for this role will be a member of a dedicated team operating a Controls and Compliance function, which will perform audit style reviews of Application Development & Maintenance Services outsourcing engagements covering compliance matters and operational service management and service delivery good practice. Must-Have Skills/Qualifications (list in order of priority): Minimum of 1-year experience in Auditing principles and practices (sample qualifications*: CISA, ISO 27001 Lead Auditor) Minimum of 1-year experience in Application security/audit roles in Application development & maintenance service industry (sample qualifications*: EC-Council's CASE (Certified Application Security Engineer), CEH(Certified Ethical Hacker), Agile Methodology(Certified Scrum Master), DevOps Certification, CMMI for Development Knowledge of secure SDLC models, secure coding standards, OWASP Top 10, threat modeling, SAST(Static Application security testing), DAST (Dynamic Application security testing), single sign on, Encryption Minimum of 1-year experience in Operational compliance requirements) Contract Management / Service Reporting(including Service Level Agreements and Operational Level Agreements) Risk management or assessment (sample qualification*: CRISC) Knowledge of cloud environment and services (sample qualification*: Microsoft Azure/AWS/Google Certifications) Team and stakeholder management Nice-to-Have Skills/Qualifications: Data privacy and protection (sample qualifications*: CIPM, CIPT, CIPP) CISSP*, CISM*, CISA*, CCSK*, CCSP* SOC1 and SOC2 (SSAE16 / ISAE3402) awareness Business Continuity and Disaster Recovery awareness (ISO 22301) Other Requirements (i.e., travel, overtime %): Occasional within country travel. Flexibility in working hours required for meetings with the global team and with service delivery contacts in other geographies - overtime may be necessary at times - About Accenture Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.