Grant Thornton (US) Security Team

Open security roles at Grant Thornton (US), and what we know about the team behind them.

accounting · 10000 employees · 2 open roles. Updated October 15, 2026.

Open roles (2)

Grant Thornton (US)

“Grant Thornton (US) emphasizes securing the Software Development Life Cycle (SDLC) and integrating security and testing...”

Grant Thornton (US)

“Grant Thornton (US) emphasizes securing the Software Development Life Cycle (SDLC) and integrating security and testing...”

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Grant Thornton (US) emphasizes securing the Software Development Life Cycle (SDLC) and integrating security and testing into the CI/CD pipeline.
Their philosophy includes refining and maintaining security training for engineering teams, suggesting a focus on developer enablement.
They are ISO/IEC 27001:2022 certified, indicating a commitment to established security standards.
The company also believes that embedding cybersecurity, resilience, and compliance enhances agility and innovation.
They formally track and resolve all critical, high, and medium security findings.

The team

Key Public-Facing Leader: Partho Ghatak, Managing Director, Chief Information Security Officer.
He "steers Grant Thornton's information security needs".
Org Structure & Reporting Line: A job posting indicates that an Application Security Engineer reports to an Application Security Manager, suggesting a structured AppSec team.
However, the overall organizational structure (centralized vs. embedded) and the reporting line of the AppSec team within the broader organization are not explicitly stated beyond the CISO's role.
Active AppSec Job Postings (1 identified):
", "SCA to track all open-source components in the developer's code base.", "Maintain security issue tracking and reporting using Azure DevOps (ADO)", and "CICD code analysis (SAST/DAST) ideally using Veracode"

What they're working on

"Shift Left"in Practice: Grant Thornton aims to "implement technologies to integrate security and testing into the CI/CD pipeline"and perform "CICD code analysis (SAST/DAST)".
They also "refine and maintain security training programs for your engineering teams".
Vulnerability Management Process: "All critical, high, and medium findings are validated and formally tracked through resolution."They use "security issue tracking and reporting using Azure DevOps (ADO)".
Secure SDLC Artifacts: "Securing the Software Development Life Cycle"is a key responsibility.
They conduct "Application Security Testing (DAST & SAST)"and use "SCA to track all open-source components in the developer's code base."Recent Initiatives: A LinkedIn post mentions "introduced 4 AI agents that help security and vulnerability management teams".