Application Security Audit Program Manager at Accenture

Description

This role involves managing audits and reviews to assess the application service control environment, ensuring adherence to contractual requirements, Accenture policies, and standards. The individual will lead the development of a comprehensive application security audit program, providing subject matter expertise during service delivery. Key responsibilities include implementing and maintaining risk self-assessment programs, tracking and reporting findings, facilitating continuous improvement, and coordinating certification preparations like SSAE16/ISAE3402/SOC 2 audits. Additionally, the role supports service delivery for various compliance programs such as SOX, HIPAA, MHRA, URAC, and PCI. This position also includes people management duties.

Required Skills

Governance Risk Compliance (GRC)
Auditing principles and practices
Application security/audit roles
Risk management or assessment

Additional Information

Required Previous Experiences: 3-4 years of experience in auditing principles and practices.
4 years of experience in application security/audit roles within the application development and maintenance service industry.
Experience in secure SDLC models, secure coding standards, OWASP Top 10, threat modeling, SAST/DAST, single sign-on, encryption knowledge, and cloud security.
Experience in team and stakeholder management.
Preferred Qualifications: Knowledge of data privacy and protection (e.g., CIPM, CIPT, CIPP).
Awareness of CISSP, CISM, CCSP, CCSK, SOC1, SOC2 (SSAE16/ISAE3402), and Business Continuity and Disaster Recovery (ISO 22301).
Cloud services and security certifications (Microsoft Azure/AWS/Google).