About the role
- Design, implement, and maintain Oracle HCM Cloud security models to safeguard sensitive HR and organizational data.
- Configure and manage Data Roles, Job Roles, Duty Roles, Privileges, and Role Hierarchies in accordance with the principle of least privilege.
- Administer and maintain Areas of Responsibility (AORs), User Administration, and security configurations across Oracle Fusion applications.
- Perform security assessments, role design, provisioning reviews, and segregation of duties (SoD) analysis.
- Configure, monitor, and support Oracle Risk Management Cloud (RMC), including Advanced Access Controls (AAC) and Advanced Financial Controls (AFC).
- Partner with functional and technical teams to identify security risks, compliance gaps, and access management issues, and implement effective remediation plans.
- Support SOX, internal, and external audits by providing security documentation, evidence, and control testing.
- Implement and maintain IT General Controls (ITGCs) and security controls aligned with SOX, ISO 27001, and other regulatory compliance requirements.
- Conduct user access reviews, security troubleshooting, and remediation activities to maintain compliance and operational efficiency.
- Assist in the development and enforcement of security governance policies, standards, and procedures.
- Monitor and evaluate security risks and recommend enhancements to strengthen Oracle Cloud security posture.
- Bachelor's degree in Information Technology, Computer Science, Information Security, Accounting Information Systems, or a related field.
- 3-7 years of experience implementing, administering, or supporting Oracle Cloud Security and Controls engagements.
- Strong understanding of Oracle Fusion applications, including:
- HCM Cloud
- Financials (ERP)
- Supply Chain Management (SCM)
- Security Administration
- Business Process Controls
- Hands-on experience with Oracle Risk Management Cloud (RMC), including AAC and AFC.
- Experience navigating and configuring Oracle Fusion application security and administration modules.
- Solid understanding of:
- Role-Based Access Control (RBAC)
- Segregation of Duties (SoD)
- User Provisioning and Access Governance
- Enterprise Security Frameworks
- Experience supporting SOX compliance, ITGC testing, internal audits, risk assessments, and compliance initiatives.
- Knowledge of information security principles, methodologies, technologies, and industry best practices.
- Working knowledge of Oracle Database concepts, Oracle Security Architecture, and GRC frameworks.
- Strong analytical, problem-solving, and troubleshooting skills.
- Ability to communicate effectively and collaborate with business stakeholders, auditors, and technical teams.