Cyber Oracle Cloud Security – Consultant

Deloitte Deloitte · Consulting

This role focuses on delivering application security for Oracle Cloud ERP, HCM, SCM, and business process controls implementations and assessments. Responsibilities include assessment, design, and implementation of application security, automated controls, and governance, risk, and compliance (GRC).

What you'd actually do

  1. As a Consultant, you will be part of our Oracle practice and will be responsible for delivering application security for Oracle Cloud ERP, HCM, SCM and business process controls implementations and assessments.
  2. Responsibilities will include assessment, design and implementation of application security, automated controls and governance, risk and compliance (GRC).
  3. Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client’s technical backbone while enabling secure digital transformation.
  4. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Skills

Required

  • 2+ years of experience in large and complex projects with multiple rollouts for countries/regions
  • 2+ years of experience in supporting security design workshops
  • 2+ years of experience with designing Oracle Cloud roles across functional areas for Oracle Cloud Financials, Supply Chain Management (SCM), Human Capital Management (HCM) or Enterprise Performance Management (EPM)
  • 2+ years of experience with business process risks & controls design
  • 2+ years of experience in designing, configuring, and implementing Oracle Risk Management Cloud
  • BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Management Information Systems, Finance, Accounting & Technology or Business
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

Nice to have

  • Previous Consulting or Big 4 experience preferred
  • Certifications such as: CISSP, CISM or CISA is desired
  • Understanding of end-to-end Oracle Cloud Security and controls implementation projects
  • Experience with Oracle Cloud role design across functional (ERP, HCM, SCM and EPM)
  • Experience with Oracle Cloud Infrastructure (OCI) security
  • Knowledge of Oracle Cloud security design and implementation methodology
  • Strong understanding of Segregation of Duties (SOD) frameworks and personally identifiable information (PII)
  • Knowledge of identifying key risks and controls, knowledge of Sarbanes Oxley (SOX) readiness, controls optimization, as well as configuration of controls around security, business process and within the Oracle Cloud RMC modules
  • Knowledge of business process, controls optimization, user provisioning and security lifecycle maintenance
  • Expertise with Oracle Risk Management Cloud – Advanced Access Controls (AAC), Advanced Financial Controls (AFC) and Financial Reporting Controls (FRC)
  • Strong understating of Single Sign-on (SSO) and Multi-factored authentication (MFA)
  • Knowledge/experience in identity access management tools and/or Oracle Identity Cloud Service (IDCS)
  • Knowledge/experience in data protection tools and techniques
  • Oracle Risk Management Cloud Certified Implementation Professional certification is desired
  • Oracle Cloud Infrastructure Security Professional certification is desired

What the JD emphasized

  • application security
  • business process controls
  • governance, risk and compliance (GRC)