Oracle Fusion Security Consultant

Ampcus Inc. • New York City, NY

3d • Remote

About The Position

Ampcus Inc. is seeking an experienced Oracle Fusion Security Consultant to lead a comprehensive post–go-live security audit and risk assessment for Oracle Fusion ERP environment. The consultant will be responsible for evaluating roles, permissions, RBAC, and SoD conflicts across Financials, Procurement, and PPM modules, while developing practical remediation actions and governance recommendations. The ideal candidate will have hands-on experience in Oracle ERP Cloud security design, audit frameworks, and compliance controls, along with a strong understanding of business processes and risk management in ERP environments.

Requirements

• 12–15+ years of IT experience with at least 5+ years in Oracle Fusion ERP Security and Compliance roles.
• Strong understanding of Oracle ERP Cloud Security architecture- job/abstract/duty roles, data security, and user provisioning.
• Hands-on experience performing SoD and RBAC analyses for Oracle Fusion.
• Experience with Oracle Risk Management Cloud (RMC) or GRC tools for access and SoD reporting.
• Solid knowledge of business processes across Financials, Procurement, and Project Portfolio Management.
• Experience conducting post–go-live security assessments and compliance audits.
• Proven ability to develop reports, dashboards, and executive-level presentations summarizing findings and recommendations.
• Familiarity with compliance standards such as SOX, ISO 27001, and internal control frameworks.
• Excellent communication, documentation, and stakeholder engagement skills.

Nice To Haves

• Preferred certifications: Oracle Fusion Security, ISO 27001 Lead Auditor, CISA, or equivalent.

Responsibilities

• Lead and execute Oracle Fusion ERP security audit covering Financials (GL, AP, AR, FA), Procurement, and PPM modules.
• Conduct roles and permissions review across abstract, job, and duty roles to ensure compliance with least privilege principles.
• Perform Role-Based Access Control (RBAC) and Segregation of Duties (SoD) conflict analysis across critical processes (P2P, O2C, R2R, Project Accounting).
• Assess non-human/service accounts to validate privileges, access monitoring, and compliance practices.
• Evaluate Oracle Fusion ERP security design, controls, and role hierarchies for alignment with governance and audit frameworks.
• Document findings and prepare deliverables including: Audit Plan & Kickoff, Interim Audit Report, Risk & Compliance Assessment, Final Audit Report & Executive Presentation.
• Provide a prioritized remediation roadmap with risk categorization and practical recommendations.
• Partner with business, audit, and IT stakeholders to present findings and facilitate remediation planning.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed