Security Transformation Specialist

Domain

Cloud Security, Vulnerability Management and Compliance

Role Summary

The Security Transformation Specialist supports vulnerability and compliance programs by translating security standards into measurable controls, developing and validating controls across cloud and on-premises environments, and driving remediation with business and technology stakeholders. The role serves as a technical subject-matter expert for vulnerability and compliance operations while contributing to automation, reporting, governance and continuous improvement.

Must-Have Skills

Hands-on experience in cloud security and Cloud Security Posture Management (CSPM) platforms such as Wiz or Prisma Cloud.

Strong expertise in Qualys Policy Compliance, including policy assessment, control validation and investigation of compliance findings.

Good understanding of cloud-native security, operating-system-level security and security configuration standards.

Working knowledge of AWS, Microsoft Azure and Google Cloud Platform (GCP).

Solid networking and/or server administration knowledge, including the OSI model, encryption, common protocols, ports and network security concepts.

Ability to interpret security standards and convert requirements into testable technical controls and scenarios.

Excellent written and verbal communication skills, with the ability to explain technical findings to business and technology stakeholders.

Strong collaboration skills and the ability to coordinate across geographically distributed, cross-functional teams.

Good-to-Have Skills

Working knowledge of Python and/or shell scripting for automation, data handling and control validation.

Experience with security-control development, cloud query languages, reporting and workflow automation.

Relevant security certifications such as CCSP, CEH or CompTIA Security+.

Key Roles and Responsibilities

Work with CSPM platforms and Qualys Policy Compliance to support control development, assessment and operational compliance activities.

Interpret organizational security standards and translate requirements into control logic, test scenarios and measurable validation criteria.

Develop, test and validate cloud-native and operating-system security controls before production deployment.

Present new or enhanced controls in governance and review forums, clearly explaining the requirement, logic, test evidence, coverage and expected impact.

Investigate false positives, approved variances, scan inaccuracies and control exceptions; document findings and coordinate corrective action.

Partner with server, network, cloud, database and application teams to address vulnerabilities, configuration gaps and compliance findings.

Provide remediation guidance and respond to stakeholder questions related to vulnerability patching and configuration changes required to align with organizational security standards.

Act as a primary point of contact for vulnerability and compliance operational queries and coordinate issues through resolution.

Conduct periodic reviews with business stakeholders covering risk posture, remediation progress, aging items, dependencies and blockers.

Collaborate with tool vendors and internal platform teams to troubleshoot product issues, coverage gaps, scan failures and inaccurate findings.

Facilitate discussions on security-control gaps and recommend practical remediation or control-enhancement options.

Perform user acceptance testing for security-control enhancements using predefined scenarios and maintain clear evidence of results.

Monitor assessment and scan coverage to help ensure in-scope infrastructure assets are evaluated according to the defined schedule.

Prepare and maintain operational reports, dashboards, control evidence and governance records.

Support governance and audit-readiness activities through regular reviews of processes, controls, evidence and operational performance.

Identify opportunities to improve process efficiency, automate repeatable activities and strengthen the overall security posture.

Perform authorized administrative and operational activities within security tools in accordance with documented procedures and access controls.

Technical Experience

5-8 years of relevant experience in cybersecurity, vulnerability management, compliance operations, cloud security.

Practical experience with Qualys Policy Compliance and at least one CSPM platform, preferably Wiz or Prisma Cloud.

Experience validating security controls across cloud platforms, servers, operating systems and network technologies.

Exposure to issue tracking, evidence management, reporting and governance workflows.

Professional Competencies

Analytical problem-solving and attention to detail.

Ownership and accountability for assigned controls, findings and stakeholder commitments.

Ability to prioritize work, manage dependencies and communicate risks or blockers promptly.

Clear documentation, presentation and stakeholder-management skills.

Continuous-improvement mindset with a focus on quality, consistency and measurable outcomes.

To be filled by recruiter

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.