Security Consulting Practitioner

Title: Cybersecurity Strategy and GRC Analyst

Location: Doha, Qatar
 

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Song, Technology and Operations services — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 738,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at www.accenture.com.

About Accenture Security

Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next-gen tech, you’ll have every chance to stay one step ahead of cybercrime and out-hack the hackers.    

Accenture Security provides comprehensive security services – from security strategy development, to business transformation, to managed security services – on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most: innovation and business growth. 

Responsible for managing cybersecurity GRC and third-party security risks at the CLIENT with focusing on Cyber Risk management. 

Roles & Responsibilities:

• Develop the cybersecurity policies and procedures aligned with best practices and NCA
• Assess patterns of non-compliance with CLIENT’s cybersecurity policies and procedures to ensure improvements.
• Establish cybersecurity compliance processes and audits for services provided by third parties.
• Develop a risk management strategy for THE CLIENT.
• Design, implement and maintain a risk management program.
• Ensure the effectiveness of the security mechanism for the protection of THE CLIENT data, systems and networks.
• Oversee and assess THE CLIENT systems’ compliance with cybersecurity, resilience and dependability requirements.
• Identify the roles and responsibilities for execution of the Risk Management Framework.
• Update the risk register based on the risk assessment.
• Determine and record the supply chain risks for key systems.
• Develop and calculate KPIs to monitor the performance of the cybersecurity function.
• Evaluate products that are implemented in RAC to manage cybersecurity risks to ensure that they are authorized for use.
• Ensure the organization's cybersecurity requirements are considered when collaborating with third parties.
• Perform risk assessment when new applications / systems are introduced or when there are changes / upgrades to an application or system.
• Perform a cybersecurity risk assessment of THE CLIENT systems and information.
• Conduct cybersecurity risk assessment across the organization.
• Develop and monitor the implementation of the risk treatment plan.
• Develop and calculate KRIs to monitor the risks.
• Develop cybersecurity risk detection, prevention and mitigation plans according to THE CLIENT’s risk appetite.
• Educate interested third parties about cybersecurity threats and mitigation methods.
• Develop and perform third party cybersecurity compliance processes and audits.
• Ensure third parties’ compliance with privacy and data security requirements.
• Communicate cybersecurity risks, posture, and event / incident management reports to the stakeholders.