Oracle Cloud ERP Risk Management Lead

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Oversee the design and execution of security models in Oracle Cloud, which encompass role-based access controls, data protection, and user provisioning frameworks.

• Establish and uphold Segregation of Duties policies, recognize conflicts, and apply mitigating controls.

• Perform risk assessments and security evaluations across Oracle Cloud environments.

• Convert business, compliance, and audit necessities into scalable security and control designs.

• Create and implement governance frameworks for access processes related to joiners, movers, and leavers.

• Configure and manage Oracle Cloud roles, privileges, data access sets, and security policies.

• Partner with functional leads to integrate controls throughout Record-to-Report, Procure-to-Pay, and Order-to-Cash processes.

• Assist in internal and external audits by providing control documentation, testing assistance, and tracking remediation.

• Deploy and enhance Oracle Risk Management Cloud modules, which include Advanced Access Controls, Financial Reporting Compliance, Transaction Controls, and Advanced Financial Controls.

• Define and implement security testing strategies, such as role validation, SoD testing, and UAT support.

• Provide guidance to clients on regulatory and compliance obligations, including SOX, GDPR, and specific industry standards.

• Generate security architecture documentation, role designs, control matrices, and governance procedures.

• Lead or assist with data security and privacy initiatives.

• Mentor junior team members and offer guidance on security best practices and delivery methodologies.

• Contribute to proposals, solution development, client presentations, methodologies, accelerators, and security frameworks.

⛳️ Requirements

• Proficient in English for effective communication.

• Experience in supporting international projects.

• Bachelor’s degree in Information Systems, Accounting, Finance, Cybersecurity, or a related discipline.

• 5–12+ years of experience in ERP security, risk, or controls, with a preference for Oracle Cloud (Fusion) focus.

• Practical experience in configuring Oracle Cloud security, including roles, privileges, and data access controls.

• Strong grasp of Segregation of Duties (SoD) concepts and controls design.

• Familiarity with Oracle Risk Management Cloud (RMC) or similar GRC tools such as SAP GRC, SailPoint, or Workday Security.

• Understanding of end-to-end business processes and associated risks/controls, including Record-to-Report, Procure-to-Pay, and Order-to-Cash.

• Experience in supporting audits and compliance efforts, such as SOX testing and control documentation.

• Deep understanding of identity and access management (IAM) principles and governance processes.

• Capacity to evaluate complex environments and propose practical, scalable solutions.

• Strong analytical, problem-solving, and critical thinking capabilities.

• Excellent communication skills, capable of translating technical concepts for business stakeholders.

• Experience in client-facing consulting roles and managing stakeholder relationships.

• Ability to work independently as well as collaboratively within distributed teams.

• Alignment with Peloton values: Amplify Ideas, Can-Do Attitude, Teamwork, Integrity, Own Your Voice, and Next-Level Service.

• Willingness to travel as necessary.

• Preferred: Experience in implementing Oracle Risk Management Cloud modules.

• Preferred: Oracle Cloud certifications in Security, Financials, or Risk Management.

• Preferred: CPA, CISA, CISSP, or CRISC certification.

• Preferred: Experience with automated controls, continuous monitoring, and analytics-driven risk management.

• Preferred: Familiarity with Oracle Integration Cloud (OIC).

• Preferred: Experience with security in multi-pillar Oracle Cloud environments.

• Preferred: Knowledge of data privacy frameworks and regulations such as GDPR and CCPA.

• Preferred: Experience in leading workstreams or managing small teams.

🏝️ Benefits

• An equal opportunity employer dedicated to fostering a diverse environment.

• Consideration without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.