Manager, Application Security and SOX IT (Oracle Fusion)
About The Position
Paramount is seeking a Manager, Application Security and Compliance to lead the design, implementation, and maintenance of security architecture for Oracle Fusion and Oracle EPM. The role serves as the subject matter expert for application security and Sarbanes-Oxley (SOX) compliance across enterprise systems, ensuring segregation of duties (SoD), governing user access, and mitigating risk across Oracle Fusion ERP, Procurement, and HCM; Oracle EPM; and Oracle Integration Cloud (OIC). The position combines technical expertise in Oracle Identity and Access Management (IAM) with knowledge of IT General Controls (ITGC) and compliance frameworks. The manager designs and maintains application security roles and policies, oversees identity lifecycles and access governance, and configures Oracle Fusion Risk Management Cloud to monitor SoD and transaction risks. The role also supports audits as the primary contact for internal and external auditors, supplies evidence and system walkthroughs, and develops remediation plans for vulnerabilities and SoD conflicts. The position is bonus eligible. Paramount offers compensation and benefits, paid time off, and opportunities for on-site and virtual engagement.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
- 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance.
- Strong knowledge of SOX compliance, the COSO framework, and IT General Controls (ITGC).
- Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.
- Hands-on experience managing security matrices and user access within Oracle Enterprise Performance Management (EPM).
- Sound knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks.
- Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) for segregation of duties and transaction monitoring.
- Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security.
- Great communication skills and ability to explain complex technical security concepts in simple terms for business compliance requirements.
- Solid analytical and problem-solving skills with high attention to detail.
- Ability to collaborate successfully with cross-functional teams, including Finance, HR, IT, and Internal Audit.
Nice To Haves
- Hands-on expertise or certification in Oracle Access Governance.
- Relevant professional certifications, such as CISA, CRISC, CISSP, or Oracle Certified Security Specialist.
Responsibilities
- Design and maintain custom job roles, duty roles, and data security policies across Oracle Fusion ERP, Procurement, HCM, Oracle EPM, and FDI environments.
- Manage user provisioning, de-provisioning, and identity lifecycles using Oracle IAM.
- Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC).
- Oversee user access reviews and certification campaigns, with the opportunity to use Oracle Access Governance for automated provisioning and analytics.
- Ensure Oracle environments adhere to SOX compliance, ITGCs, and internal security policies.
- Implement, configure, and manage Oracle Fusion Risk Management Cloud Advanced Access Controls and Advanced Financial Controls to monitor and uphold segregation of duties.
- Serve as the primary point of contact for internal and external auditors, providing reports, evidence, and system walkthroughs.
- Identify security vulnerabilities or segregation-of-duties conflicts and design and execute remediation plans.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k) plan
- Life insurance coverage
- Disability benefits
- Tuition assistance program
- PTO or applicable benefits as dictated by the appropriate Collective Bargaining Agreement
- Bonus eligibility
- Generous paid time off
- Attractive compensation and comprehensive benefits packages
- Opportunities for on-site and virtual engagement events
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
