Cyber Security Lead
Accenture · Guangzhou
Principal Accountabilities:
- Strategic Leadership: Shape and execute cybersecurity strategy, embedding best practices and aligning initiatives with business goals and risk appetite.
- Stakeholder Engagement: Manage relationships with senior executives, Boards, regulators, and external partners. Communicate security topics clearly to all stakeholders.
- Customer Focus: Promote a customer-centric security culture, leveraging cybersecurity to enhance operations and customer advocacy.
- Continuous Improvement: Regularly review and refine security processes, controls, and technologies, incorporating feedback and industry best practices.
- Risk Management & Compliance: Guide senior management on cybersecurity risk, ensuring compliance with global regulations and standards (e.g., NIST, ISO 27001, GDPR, FCA). Serve as the main contact for audits and assessments.
- AI Security: LLM threat modelling, AI governance, Agentic, adversarial ML, AI red‑teaming, NIST AI RMF, architecture, MCP, API
- Data: Data environments, Governance, DSPM, DLP, privacy engineering, Reg -GDPR/DORA, tokenization, OSS
- Application Security (AppSec): Platform integration, Policy as Code, SAST/DAST/SCA, ASPM, SBOM, OWASP, DevSecOps, threat modelling, SSDLC, API security
- Platform Security: Data/AI/dev platform security, OSS risk, sovereign architecture, SIEM/SOAR/IAM/PAM, zero trust
- Modern Infra Security: Infra security, OSS risk, sovereign architecture, SIEM/SOAR/IAM/PAM, zero trust
- OT Security: Infra security, SCADA, DCS, PLCs, PURDUE, IEC62443, NIST, Convergence, Risk
- Governance & Reporting: Deliver clear, actionable reports and presentations to Boards and committees, translating technical risks into business intelligence.
- Incident Response: Oversee incident response plans and lead responses to major security incidents.
- Policy & Awareness: Set the tone for cybersecurity practices and contribute to global standards, increasing awareness and risk reduction.
- Team Leadership: Build and mentor a high-performing security team, promoting professional development and staying ahead of emerging threats.
Requirements
Essential Experience:
- Technical & Regulatory Experience: Extensive expertise in cybersecurity, technology, and risk management. Skilled in control design, operational processes, incident response, and regulatory engagement. Deep knowledge of security technologies, frameworks (NIST, ISO 27001), and requirements (GDPR, FCA).
- Stakeholder Management: Strong leadership experience in complex, fast-paced environments, managing large-scale cybersecurity issues and engaging with board-level stakeholders and regulators.
- Leadership: Leadership: Proven track record leading international cybersecurity teams and initiatives, raising standards, enhancing the function’s profile, and driving transformation to world-class performance.
Essential Capabilities:
- Business Insight & Decision Quality: Applies business and market knowledge to make timely, effective decisions.
- Strategic Mindset: Anticipates future trends and translates them into breakthrough strategies.
- Action Oriented: Tackles new opportunities and challenges with urgency, energy, and enthusiasm.
- Builds Effective Teams: Creates strong, diverse teams focused on achieving shared goals.
- Persuasion & Conviction: Uses compelling arguments to gain support and addresses difficult issues directly.
- Manages Ambiguity & Ensures Accountability: Operates effectively amid uncertainty and holds self and others accountable for commitments.
Knowledge, Qualifications & Experience
- Minimum 15 years’ experience in risk management, cybersecurity, technology audit, or IT roles
- Bachelor’s degree in a technology-related field or equivalent experience
- Professional security certification (e.g., CISSP, CISM, CISA, CRISC)
- Deep knowledge of security frameworks and best practices (ISO/IEC 27001, NIST)
- Proven experience developing and implementing security strategies
- Strong written and verbal communication skills, with the ability to influence senior stakeholders
- Demonstrated leadership of international cybersecurity teams and initiatives
- Proficient in technical disciplines and security/risk methodologies
- Willingness to travel as required
About Accenture
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us at www.accenture.com
Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.