岗位描述
Principal Accountabilities:
Strategic Leadership: Shape and execute cybersecurity strategy, embedding best practices and aligning initiatives with business goals and risk appetite.
Stakeholder Engagement: Manage relationships with senior executives, Boards, regulators, and external partners. Communicate security topics clearly to all stakeholders.
Customer Focus: Promote a customer-centric security culture, leveraging cybersecurity to enhance operations and customer advocacy.
Continuous Improvement: Regularly review and refine security processes, controls, and technologies, incorporating feedback and industry best practices.
Risk Management & Compliance: Guide senior management on cybersecurity risk, ensuring compliance with global regulations and standards (e.g., NIST, ISO 27001, GDPR, FCA). Serve as the main contact for audits and assessments.
AI Security: LLM threat modelling, AI governance, Agentic, adversarial ML, AI red‑teaming, NIST AI RMF, architecture, MCP, API
Data: Data environments, Governance, DSPM, DLP, privacy engineering, Reg -GDPR/DORA, tokenization, OSS
Application Security (AppSec): Platform integration, Policy as Code, SAST/DAST/SCA, ASPM, SBOM, OWASP, DevSecOps, threat modelling, SSDLC, API security
Platform Security: Data/AI/dev platform security, OSS risk, sovereign architecture, SIEM/SOAR/IAM/PAM, zero trust
Modern Infra Security: Infra security, OSS risk, sovereign architecture, SIEM/SOAR/IAM/PAM, zero trust
OT Security: Infra security, SCADA, DCS, PLCs, PURDUE, IEC62443, NIST, Convergence, Risk
Governance & Reporting: Deliver clear, actionable reports and presentations to Boards and committees, translating technical risks into business intelligence.
Incident Response: Oversee incident response plans and lead responses to major security incidents.
Policy & Awareness: Set the tone for cybersecurity practices and contribute to global standards, increasing awareness and risk reduction.
Team Leadership: Build and mentor a high-performing security team, promoting professional development and staying ahead of emerging threats.
Requirements
Essential Experience:
Technical & Regulatory Experience: Extensive expertise in cybersecurity, technology, and risk management. Skilled in control design, operational processes, incident response, and regulatory engagement. Deep knowledge of security technologies, frameworks (NIST, ISO 27001), and requirements (GDPR, FCA).
Stakeholder Management: Strong leadership experience in complex, fast-paced environments, managing large-scale cybersecurity issues and engaging with board-level stakeholders and regulators.
Leadership: Leadership: Proven track record leading international cybersecurity teams and initiatives, raising standards, enhancing the function’s profile, and driving transformation to world-class performance.
Essential Capabilities:
Business Insight & Decision Quality: Applies business and market knowledge to make timely, effective decisions.
Strategic Mindset: Anticipates future trends and translates them into breakthrough strategies.
Action Oriented: Tackles new opportunities and challenges with urgency, energy, and enthusiasm.
Builds Effective Teams: Creates strong, diverse teams focused on achieving shared goals.
Persuasion & Conviction: Uses compelling arguments to gain support and addresses difficult issues directly.
Manages Ambiguity & Ensures Accountability: Operates effectively amid uncertainty and holds self and others accountable for commitments.
Knowledge, Qualifications & Experience
Minimum 15 years’ experience in risk management, cybersecurity, technology audit, or IT roles
Bachelor’s degree in a technology-related field or equivalent experience
Professional security certification (e.g., CISSP, CISM, CISA, CRISC)
Deep knowledge of security frameworks and best practices (ISO/IEC 27001, NIST)
Proven experience developing and implementing security strategies
Strong written and verbal communication skills, with the ability to influence senior stakeholders
Demonstrated leadership of international cybersecurity teams and initiatives
Proficient in technical disciplines and security/risk methodologies
Willingness to travel as required
About Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us at www.accenture.com
埃森哲是实施平等就业机会及公平任用行动的雇主,为女性/少数民族/退伍军
人/残障人士提供平等就业机会。
平等就业机会
聘用决定不应受如下因素影响:年龄、种族、信仰、肤色、宗教、性别、国籍、
血统、残疾情况、退伍军人身份、性取向、性别认同或表达、基因信息、婚
姻状况、公民身份。
在招聘流程中,求职者没有义务披露被封存或删除的定罪或逮捕记录。
目前受雇于埃森哲客户或埃森哲附属公司的候选人可能不在考虑范围内。