Manager, Application Security, SOX

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Lead the design, execution, and upkeep of the security architecture for Oracle Fusion and Oracle EPM.

• Act as the subject matter expert for application security and SOX compliance across enterprise systems.

• Ensure the Segregation of Duties, oversee user access governance, and mitigate risks across Oracle Fusion, Oracle EPM, and Oracle Integration Cloud.

• Develop custom job roles and duty roles.

• Maintain data security policies for Oracle Fusion ERP, Procurement, HCM, Oracle EPM, and FDI environments.

• Manage user provisioning, de-provisioning, and identity lifecycles utilizing Oracle IAM.

• Define and regulate security roles, privileges, and access controls within Oracle Integration Cloud.

• Supervise user access reviews and certification campaigns.

• Implement, configure, and manage Oracle Fusion Risk Management Cloud Advanced Access Controls and Advanced Financial Controls.

• Ensure compliance with SOX regulations, ITGCs, and internal security policies in Oracle environments.

• Serve as the primary liaison for both internal and external auditors, providing necessary reports, evidence, and system walkthroughs.

• Identify security vulnerabilities and Segregation of Duties conflicts, executing remediation plans as needed.

• Collaborate effectively with Finance, HR, IT, and Internal Audit departments.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related discipline.

• 5+ years of specialized experience in Oracle Application Security and IT Audit/Compliance.

• Strong understanding of SOX compliance, COSO framework, and IT General Controls (ITGC).

• Demonstrated experience in designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.

• Hands-on experience in managing security matrices and user access within Oracle Enterprise Performance Management.

• Extensive hands-on experience with Oracle Identity and Access Management frameworks.

• Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) focusing on Segregation of Duties and transaction monitoring.

• Clear understanding of Oracle Integration Cloud roles, privileges, and integration security.

• Practical expertise or certification in Oracle Access Governance.

• Relevant professional certifications such as CISA, CRISC, CISSP, or Oracle Certified Security Specialist.

• Ability to convey complex technical security concepts in straightforward terms for business compliance requirements.

• Strong analytical and problem-solving skills with meticulous attention to detail.

• Capacity to collaborate with Finance, HR, IT, and Internal Audit teams effectively.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k) plan.

• Life insurance coverage.

• Disability benefits.

• Tuition assistance program.

• PTO / generous paid time off.

• Bonus eligibility.

• Attractive compensation and comprehensive benefits packages.

• Opportunities for on-site and virtual engagement events.

• Opportunities to build meaningful connections and a vibrant community.

• Reasonable accommodations for qualified individuals with disabilities and disabled veterans.