Manager, Application Security & SOX IT

Paramount•Los Angeles, CA

8d•$124,000 - $186,000

About The Position

We are seeking a highly skilled and proficient Manager, Application Security and Compliance to lead the design, implementation, and maintenance of our Oracle Fusion and Oracle EPM security architecture. In this role, you will serve as the Subject Matter Expert (SME) for application security and Sarbanes-Oxley (SOX) compliance across our enterprise systems. You will be in charge of ensuring strict Segregation of Duties (SoD), managing user access governance, and mitigating risk across Oracle Fusion (ERP, Procurement, and HCM), Oracle EPM, and Oracle Integration Cloud (OIC). The ideal candidate brings a blend of technical expertise in Oracle Identity and Access Management (IAM) and a deep knowledge of IT General Controls (ITGC) and compliance frameworks.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance.
Strong knowledge of SOX compliance, COSO framework, and IT General Controls (ITGC).
Oracle Fusion Expertise: Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.
Oracle EPM Security: Hands-on experience managing security matrices and user access within Oracle Enterprise Performance Management.
Oracle IAM: Sound knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks.
Risk Management Cloud: Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) for SoD and transaction monitoring.
OIC Knowledge: Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security.

Nice To Haves

Hands-on expertise or certification in Oracle Access Governance.
Relevant professional certifications (e.g., CISA, CRISC, CISSP, or Oracle Certified Security Specialist).
Great communication skills. Ability to explain complex technical security concepts in simple terms for business compliance requirements.
Solid analytical and problem-solving skills with high attention to detail.
Ability to collaborate successfully with cross-functional teams, including Finance, HR, IT, and Internal Audit.

Responsibilities

Security Architecture and Role Management Design and Maintenance: Create custom job roles and duty roles. Keep data security policies updated in Oracle Fusion (ERP, Procurement, HCM), Oracle EPM, and FDI environments.
Identity Management: Leverage Oracle IAM to manage user provisioning, de-provisioning, and identity lifecycles.
OIC Security: Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC).
Access Governance: Oversee user access reviews and certification campaigns, with an opportunity to leverage Oracle Access Governance for automated provisioning and analytics.
Compliance & Risk Management SOX Compliance: Ensure all Oracle environments strictly adhere to SOX compliance, ITGCs, and internal security policies.
Risk Mitigation: Implement, configure, and manage Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls) to continuously monitor and uphold Segregation of Duties (SoD).
Audit Support: Serve as the primary point of contact for internal and external auditors, providing necessary reports, evidence, and system walkthroughs.
Remediation: Identify security vulnerabilities or SoD conflicts and proactively design and execute remediation plans.