The WorkControls Testing & Audit Readiness: - Lead and execute
- Plan and execute control testing cycles (design effectiveness and operating effectiveness) across IT general controls (ITGCs), application controls, and regulatory controls for frameworks including SOX, SOC 1/2, ISO 27001, NIST CSF, CMMC, GDPR, CCPA, HIPAA, and others.
Audit Readiness Programs: Manage
- Assess control gaps, define remediation roadmaps, build evidence libraries, and prepare clients for internal and external audits - including Big 4 and regulatory examinations.
Technical Architecture Assessments: Deliver
- Evaluate and advise on the security and compliance posture of multi-platform architectures spanning cloud (AWS, Azure, GCP), enterprise applications (SAP, Salesforce, ServiceNow), data platforms, and hybrid infrastructure.
Identity & Access Management (IAM) Compliance: Own
- Review and test IAM controls including role-based access control (RBAC), privileged access management (PAM), MFA enforcement, access certification cycles, and joiner/mover/leaver processes against regulatory and audit requirements.
GRC Program Delivery: Support
- Contribute to integrated risk and compliance programs, including policy development, risk assessments, control mapping, and evidence collection. Support Third-Party Risk Management (TPRM) assessments for Tier 1 vendors.
- Translate regulatory requirements into actionable technical controls and architecture recommendations for client engineering and security teams.
- Produce high-quality audit workpapers, findings reports, gap analyses, and management presentations.
- Mentor junior analysts and consultants; contribute to proposals, client relationships, and internal practice development.
Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.
Here's what you need- Minimum of 8 years of total experience in cybersecurity, IT audit, compliance, or GRC consulting - with at least 5 years focused on controls testing and audit readiness.
- Minimum 5 of years of demonstrated hands-on experience testing ITGCs, application controls, and regulatory controls across at least two major frameworks (SOX, SOC 2, ISO 27001, NIST CSF, CMMC, HIPAA, GDPR, or similar).
- Minimum 5 of years of technical architecture experience across multiple platforms - cloud infrastructure (AWS, Azure, or GCP), enterprise applications, data governance platforms, and identity/access management systems.
- Minimum 5 of years of experience with evidence management, audit artifact preparation, and facilitating walkthroughs with internal and external auditors.
- Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate's Degree, must have minimum 6 years work experience)
Compensation at Accenture varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Accenture provides a reasonable range of compensation for roles that may be hired as set forth below.
We anticipate this job posting will be posted until 08/08/2026.
Accenture offers a market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage, a 401(k) plan, bonus opportunities, paid holidays, and paid time off. See more information on our benefits here:
U.S. Employee Benefits | Accenture
Role Location Annual Salary Range
California $94,400 to $293,800
Cleveland $87,400 to $235,000
Colorado $94,400 to $253,800
District of Columbia $100,500 to $270,300
Illinois $87,400 to $253,800
Maine $80,400 to $216,200
Maryland $94,400 to $253,800
Massachusetts $94,400 to $270,300
Minnesota $94,400 to $253,800
New York $87,400 to $293,800
New Jersey $100,500 to $293,800
Virginia $87,400 to $270,300
Washington $100,500 to $270,300
