Oracle HCM Cloud Security Specialist - GRC/Audit

Role Overview :

We are seeking an experienced Oracle HCM Cloud Security Specialist with strong expertise in Oracle Fusion Security, Governance, Risk & Compliance (GRC), and audit controls.

The ideal candidate will be responsible for designing, implementing, and maintaining robust security frameworks within Oracle HCM Cloud while ensuring compliance with organizational policies, regulatory requirements, and industry best practices.

Key Responsibilities :

• Design, implement, and maintain Oracle HCM Cloud security models to safeguard sensitive HR and organizational data.

• Configure and manage Data Roles, Job Roles, Duty Roles, Privileges, and Role Hierarchies in accordance with the principle of least privilege.

• Administer and maintain Areas of Responsibility (AORs), User Administration, and security configurations across Oracle Fusion applications.

• Perform security assessments, role design, provisioning reviews, and segregation of duties (SoD) analysis.

• Configure, monitor, and support Oracle Risk Management Cloud (RMC), including Advanced Access Controls (AAC) and Advanced Financial Controls (AFC).

• Partner with functional and technical teams to identify security risks, compliance gaps, and access management issues, and implement effective remediation plans.

• Support SOX, internal, and external audits by providing security documentation, evidence, and control testing.

• Implement and maintain IT General Controls (ITGCs) and security controls aligned with SOX, ISO 27001, and other regulatory compliance requirements.

• Conduct user access reviews, security troubleshooting, and remediation activities to maintain compliance and operational efficiency.

• Assist in the development and enforcement of security governance policies, standards, and procedures.

• Monitor and evaluate security risks and recommend enhancements to strengthen Oracle Cloud security posture.

Required Qualifications :

• Bachelor's degree in Information Technology, Computer Science, Information Security, Accounting Information Systems, or a related field.

• 3+ years of experience implementing, administering, or supporting Oracle Cloud Security and Controls engagements.

Technical Expertise :

• Strong understanding of Oracle Fusion applications, including HCM Cloud, Financials (ERP), Supply Chain Management (SCM), Security Administration, and Business Process Controls.

• Hands-on experience with Oracle Risk Management Cloud (RMC), including AAC and AFC.

• Solid understanding of Role-Based Access Control (RBAC), Segregation of Duties (SoD), User Provisioning, and Access Governance.

• Experience supporting SOX compliance, ITGC testing, internal audits, risk assessments, and compliance initiatives.

• Working knowledge of Oracle Database concepts, Oracle Security Architecture, and GRC frameworks.

Preferred Qualifications :

• Experience with Oracle Cloud implementations and security transformation projects.

• Working knowledge of PL/SQL queries for security analysis and reporting.

• Certifications : Oracle Cloud Security Certifications, CISA, CRISC, CISSP, or ISO 27001 Lead Implementer/Auditor.