Consultant- Oracle Security & Controls

We are seeking an experienced Oracle HCM Cloud Security Specialist with strong expertise in Oracle Fusion Security, Governance, Risk & Compliance (GRC), and audit controls. The ideal candidate will be responsible for designing, implementing, and maintaining robust security frameworks within Oracle HCM Cloud while ensuring compliance with organizational policies, regulatory requirements, and industry best practices.

• Design, implement, and maintain Oracle HCM Cloud security models to safeguard sensitive HR and organizational data.
• Configure and manage Data Roles, Job Roles, Duty Roles, Privileges, and Role Hierarchies in accordance with the principle of least privilege.
• Administer and maintain Areas of Responsibility (AORs), User Administration, and security configurations across Oracle Fusion applications.
• Perform security assessments, role design, provisioning reviews, and segregation of duties (SoD) analysis.
• Configure, monitor, and support Oracle Risk Management Cloud (RMC), including Advanced Access Controls (AAC) and Advanced Financial Controls (AFC).
• Partner with functional and technical teams to identify security risks, compliance gaps, and access management issues, and implement effective remediation plans.
• Support SOX, internal, and external audits by providing security documentation, evidence, and control testing.
• Implement and maintain IT General Controls (ITGCs) and security controls aligned with SOX, ISO 27001, and other regulatory compliance requirements.
• Conduct user access reviews, security troubleshooting, and remediation activities to maintain compliance and operational efficiency.
• Assist in the development and enforcement of security governance policies, standards, and procedures.
• Monitor and evaluate security risks and recommend enhancements to strengthen Oracle Cloud security posture.

• Bachelor's degree in Information Technology, Computer Science, Information Security, Accounting Information Systems, or a related field.
• 3-7 years of experience implementing, administering, or supporting Oracle Cloud Security and Controls engagements.
• Strong understanding of Oracle Fusion applications, including:
  • HCM Cloud
  • Financials (ERP)
  • Supply Chain Management (SCM)
  • Security Administration
  • Business Process Controls
• Hands-on experience with Oracle Risk Management Cloud (RMC), including AAC and AFC.
• Experience navigating and configuring Oracle Fusion application security and administration modules.
• Solid understanding of:
  • Role-Based Access Control (RBAC)
  • Segregation of Duties (SoD)
  • User Provisioning and Access Governance
  • Enterprise Security Frameworks
• Experience supporting SOX compliance, ITGC testing, internal audits, risk assessments, and compliance initiatives.
• Knowledge of information security principles, methodologies, technologies, and industry best practices.
• Working knowledge of Oracle Database concepts, Oracle Security Architecture, and GRC frameworks.
• Strong analytical, problem-solving, and troubleshooting skills.
• Ability to communicate effectively and collaborate with business stakeholders, auditors, and technical teams.