GRC Consultant

DESCRIPTION

Accenture’s Security Practice is one of the fastest growing areas of the business with significant growth plans through additional recruitment and acquisitions.

We are seeking a highly skilled and detail-oriented Governance, Risk, and Compliance (GRC) Consultant to join our Security Delivery team. This role focuses on Security Maturity Assessments, Consultancy engagements, and Vendor Security Audits. You will work closely with internal stakeholders and external clients to assess, manage, and mitigate information security risks, ensuring compliance with regulatory standards and enhancing organizational resilience.

Key Responsibilities

• Conduct Security Maturity Assessments using frameworks such as NIST CSF, ISO 27001, and CIS Controls.
• Lead vendor risk assessments, including due diligence, audit reviews, and remediation planning.
• Develop and implement GRC frameworks, policies, and procedures tailored to client environments.
• Collaborate with cross-functional teams to ensure third-party vendors meet security and compliance requirements.
• Provide strategic advisory on risk management, compliance readiness, and security program development.
• Support internal and external audit processes, including documentation and stakeholder engagement.
• Stay informed on emerging threats, vulnerabilities, and industry best practices.

Qualifications

• 3–5 years of experience in GRC, cybersecurity consulting, or security program management.
• Strong understanding of regulatory standards (e.g., GDPR, PCI DSS, SOC 2).
• Experience with GRC tools and risk assessment methodologies.
• Certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.
• Excellent communication and stakeholder management skills.

Preferred Skills

• Familiarity with TPRM (Third-Party Risk Management) processes.
• Experience in security architecture, IAM, and vulnerability management.
• Ability to translate technical risks into business impact for executive audiences.