Manager, Application Security, SOX
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Responsibilities:
- Lead the design, implementation, and maintenance of Oracle Fusion and Oracle EPM security architecture
- Serve as the subject matter expert for application security and SOX compliance across enterprise systems
- Ensure Segregation of Duties, manage user access governance, and mitigate risk across Oracle Fusion, Oracle EPM, and Oracle Integration Cloud
- Create custom job roles and duty roles
- Maintain data security policies across Oracle Fusion ERP, Procurement, HCM, Oracle EPM, and FDI environments
- Manage user provisioning, de-provisioning, and identity lifecycles using Oracle IAM
- Define and govern security roles, privileges, and access controls within Oracle Integration Cloud
- Oversee user access reviews and certification campaigns
- Implement, configure, and manage Oracle Fusion Risk Management Cloud Advanced Access Controls and Advanced Financial Controls
- Ensure Oracle environments adhere to SOX compliance, ITGCs, and internal security policies
- Serve as primary contact for internal and external auditors, providing reports, evidence, and system walkthroughs
- Identify security vulnerabilities and Segregation of Duties conflicts and execute remediation plans
- Collaborate with Finance, HR, IT, and Internal Audit
Requirements:
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field
- 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance
- Strong knowledge of SOX compliance, COSO framework, and IT General Controls (ITGC)
- Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM
- Hands-on experience managing security matrices and user access within Oracle Enterprise Performance Management
- Deep hands-on experience with Oracle Identity and Access Management frameworks
- Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) for Segregation of Duties and transaction monitoring
- Clear comprehension of Oracle Integration Cloud roles, privileges, and integration security
- Hands-on expertise or certification in Oracle Access Governance
- Relevant professional certifications such as CISA, CRISC, CISSP, or Oracle Certified Security Specialist
- Ability to explain complex technical security concepts in simple terms for business compliance requirements
- Solid analytical and problem-solving skills with high attention to detail
- Ability to collaborate with Finance, HR, IT, and Internal Audit teams
Benefits:
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k) plan
- Life insurance coverage
- Disability benefits
- Tuition assistance program
- PTO / generous paid time off
- Bonus eligibility
- Attractive compensation and comprehensive benefits packages
- Opportunities for on-site and virtual engagement events
- Opportunities to build meaningful connections and a vibrant community
- Reasonable accommodations for qualified individuals with disabilities and disabled veterans
Similar Jobs
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.
Security Engineer – Manager
Security Engineering Manager leading zero-trust, IAM, collaboration, and AI workspace security for Binance’s global blockchain ecosystem. Building secure platforms and leading distributed engineering teams.
Principal Security Engineer
Principal Security Engineer reviewing FedRAMP cloud architectures, authorization packages, and security controls. Advising government programs and Cloud Service Providers on NIST compliance and risk.
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.
Application Security Researcher
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.
Cloud Security Administrator
Cloud Security Administrator securing Ballard Spahr’s national law-firm cloud infrastructure. Managing Azure security controls, access, monitoring, audits, and incident response.
SAP S/4HANA Defense & Security Functional Lead
SAP S/4HANA Defense & Security Functional Lead modernizing Department of War operations for CSCI Consulting. Leading transformation workshops, solution design, implementation, testing, and deployment.
Technical Lead – Chief Security Architect, Engineer
Technical Lead and Chief Security Architect securing Federal Government enterprise systems at PingWind. Leading architecture reviews, risk strategies, and modernization across cloud and emerging technologies.