Security Transformation Consultant (regular/senior) (She/He/They)

WHO WE ARE:

The Cyber Security team, part of Accenture Security, supports organizations in building secure, resilient, and scalable security capabilities across complex enterprise technology landscapes — integrating security into software development, cloud adoption, digital transformation, and technology modernization so that security by design and security by default are reflected in how systems are actually built and operated, not only in policy. 

We act as trusted advisors to some of the world's leading organizations, helping them define pragmatic security operating models, improve security maturity, and align cybersecurity capabilities with their business and technology objectives. Working at the forefront of the industry means constant exposure to complex, high-stakes security challenges and the latest technologies — across banking, manufacturing, healthcare, retail, and public sector, each with its own regulatory context and technical scale. 

As part of a global security leader, you work on engagements that span the full breadth of modern enterprise security — from securing AI-enabled systems and cloud-native architectures to embedding security into large-scale digital transformation programmed. The variety of clients, industries, and technology stacks.

THE WORK: 

• Lead and support security maturity assessments across applications, software delivery processes, infrastructure and enterprise environments, and define pragmatic transformation roadmaps. 
• Design and improve Secure SDLC operating models, security governance frameworks and assurance processes for clients across industries. 
• Advise clients on security-by-design and shift-left security practices, translating principles into actionable requirements across development, platform and engineering teams — and directly supporting those teams where needed.
• Conduct security architecture reviews for end-to-end solutions spanning legacy, hybrid, cloud-native and modern application environments, including platforms on AWS, Azure or GCP. 
• Facilitate threat modeling and risk assessment activities for complex applications, distributed architectures and enterprise transformation programs.
• Assess security implications of application modernization, cloud transformation and technology migration initiatives, including challenges specific to on-premises and hybrid environments. 
• Define security requirements, assurance processes and governance mechanisms for applications, platforms and enterprise environments, referencing frameworks such as OWASP ASVS, MITRE ATT&CK and relevant industry standards. 
• Support development of software supply chain security capabilities, vulnerability management programs and secure engineering practices. 
• Establish security metrics, reporting models and continuous improvement mechanisms to drive measurable progress in client security posture. 
• Lead workshops with technical, operational, business and senior stakeholders, translating complex security risks into clear recommendations for decision makers. 
• Act as a trusted advisor to clients, providing guidance on secure design principles, emerging security trends and practical risk-based decision making. 

Flexible: The work location for this role may include a mix of working remotely, onsite at a client or in an Accenture office - depending on specific project circumstances. 

With all our roles, there is some in-person time for collaboration, learning and building relationships with clients, peers, leaders, and communities. As an employer, we will be as flexible as possible to support your specific work/life needs. 

• Permanent employment contract.
• Individual support of a People Lead and a specific path of professional development, as well as the possibility of a session with a Coach.
• A wide training package (soft, technical, and language training offer, access to the e-learning platforms, Gallup test, GenAI training, possibility of co-financing courses, and certification).
• Employee Assistance Program - legal, financial, and psychological consultations.
• Accenture employees eligible for the Employee share purchase plan automatically become eligible for quarterly dividends if they own company shares.
• Paid employee referral program.
• Private medical care, life insurance.
• Access to the Worksmile platform (possibility of using a wide range of products and services, including the Multisport card).

We are looking for someone who can navigate complex security landscapes end-to-end — a broad perspective and the ability to translate security into business outcomes matter as much as technical depth. 

• Several years of experience in cybersecurity consulting, application security, security architecture, DevSecOps, security governance, or a related discipline. 
• Basic understanding of Secure SDLC concepts, with the ability to design or improve security processes, governance frameworks, and operating models across software delivery. 
• Experience leading or supporting security maturity assessments and translating findings into actionable transformation roadmaps for both technical and business stakeholders. 
• Good working knowledge of application security principles, with practical application of OWASP Top 10 and OWASP ASVS in security assessments, architecture reviews, and secure design guidance. 
• Hands-on familiarity with at least one cloud platform — AWS, Azure, or GCP — sufficient to assess architecture decisions, identify security gaps, and advise on secure design across cloud, hybrid, and on-premises environments. 
• Experience facilitating threat modelling, security architecture reviews, and risk assessments for complex applications and distributed enterprise environments. 
• Ability to define practical and scalable security requirements, assurance processes, and governance mechanisms across development, platform, and enterprise environments. 
• Strong communication and stakeholder management skills — comfortable engaging with development and platform teams on day-to-day security topics, as well as leading workshops and presenting to senior audiences. 
• Good proficiency in both Polish and English (minimum B2 level), as projects are delivered for clients in Poland and internationally. 
• Leadership mindset with the ability to drive security initiatives and build trusted relationships with clients and cross-functional teams. 

Seniority levels 

• Regular (approximately 3–5 years of relevant experience). Candidates at this level are expected to deliver defined workstreams — conducting network security assessments, supporting Zero Trust and cloud architecture reviews, and communicating findings to client technical teams. A solid network security foundation is expected, with active development toward cloud security, Zero Trust, and security advisory capabilities. 
• Senior (approximately 5+ years of relevant experience). Candidates at this level are expected to lead workstreams, provide technical direction, and mentor junior colleagues. This requires demonstrated depth in network security architecture, combined with real breadth across at least one adjacent domain — cloud security, Zero Trust, identity, or application security — and the standing to present and defend a position to senior client stakeholders up to CISO level. 

If you are moving across from development, platform engineering, or an in-house security role, tell us what you have built and we will work out where you fit. That conversation happens in the interview, not in the CV screen. 

BONUS POINTS IF YOU HAVE: 

• Experience in enterprise security transformation programs or security operating model design. 
• Practical knowledge of DevSecOps tooling and security integration within modern software delivery pipelines. 
• Experience with AI governance, AI risk management or securing AI-enabled applications and services. 
• Industry-recognized certifications in cybersecurity or cloud security. 
• Experience working across multiple industries or in large-scale, complex enterprise environments. 
• Research indicates that some candidates, especially the most diverse ones, may hesitate to apply for positions if they don't meet all requirements. If you believe you possess the necessary skills, even if not meeting every requirement, we wholeheartedly encourage you to submit your application.