Sr. Manager, Oracle Fusion ERP Security and Control
- Compensation
- Not disclosed
- Location
- Houston, TX, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Not specified
- Posted
Skills
Must have
- Bachelor’s degree in Management Information Systems, Computer Science, Accounting, Finance, Cybersecurity, or a related discipline.
- 7+ years of experience in ERP application security, controls, access governance, audit, implementation, or managed services, including at least three years in a leadership capacity.
- Minimum 5 years of experience with Oracle Fusion Cloud ERP security and controls, including role design, access provisioning, segregation of duties, sensitive access, and controls evidence.
- Minimum 5 years of experience presenting control design, risk, evidence, remediation, and findings to internal and external auditors and senior stakeholders.
- Strong written, verbal, analytical, problem-solving, and executive communication skills.
- Must be a U.S. citizen or U.S. permanent resident.
Nice to have
- Oracle Risk Management Cloud experience, including Advanced Access Controls, Advanced Financial Controls, and Access Certification.
- Experience managing security and controls for Costpoint ERP or demonstrated experience leading S&C across multiple regulated or financially significant ERP platforms.
- Experience leading end-to-end ERP security implementations through design, build, test, deployment, stabilization, and sustainment.
- Identity governance, privileged access management, self-service access request, or approval workflow implementation experience.
- Controls automation, continuous monitoring, automated testing, analytics, and evidence management experience.
- Professional certification such as CISA, CISM, CISSP, CIA, CPA, or an Oracle Cloud certification.
- Experience supporting government contracting, aerospace and defense, or other regulated operating environments.
- Managed service or shared service operating model experience across multiple geographic locations and time zones.
Full description
Overview
Oceaneering’s Enterprise Applications organization enables secure, reliable, and compliant business operations through enterprise platforms, governance, and support. The Security & Controls function partners with business process owners, Internal Audit, external auditors, Cybersecurity, Compliance, and IT delivery teams to manage application security, access governance, segregation of duties, controls, and audit readiness across the ERP landscape.
Position Summary
The Senior Manager, Security & Controls leads the day-to-day delivery and strategic advancement of Security & Controls for Oracle Fusion Cloud ERP and Costpoint ERP. Reporting to the Sr. Director – Enterprise Applications, this role is accountable for application security, user access governance, segregation of duties, controls design and testing, compliance, audit support, service levels, staffing, reporting, and continuous improvement. The position will build and operate a sustainable, risk-based S&C capability that protects Oceaneering’s enterprise applications while enabling efficient business operations.
Duties and Responsibilities
Operational Leadership and Service Delivery
- Own end-to-end delivery of the Security & Controls function across Oracle Fusion Cloud ERP and Costpoint ERP, including provisioning, access reviews, controls testing, incident and request resolution, audit support, and reporting.
- Define, publish, monitor, and continuously improve service levels and performance measures for access requests, security incidents, controls execution, and audit support.
- Manage the operating model, capacity plan, staffing mix, budget, priorities, risks, and delivery commitments for the S&C team.
- Ensure documented procedures, runbooks, escalation paths, cross-training, and business continuity coverage are maintained for critical S&C services.
Application Security and Access Governance
- Set direction for application security architecture and governance across Oracle Fusion Cloud ERP and Costpoint ERP, including role design, least privilege, privileged access, and segregation-of-duties standards.
- Govern role catalogs, personas, job-to-role mappings, approval workflows, sensitive access, and periodic user access certifications.
- Own segregation-of-duties and sensitive-access rulesets, risk ratings, mitigating controls, exception processes, and periodic reviews.
- Direct security remediation and role redesign activities, including resolution of inherited, custom, and cross-application access conflicts.
- Partner with Identity and Access Management, Cybersecurity, infrastructure, integration, functional, and business teams to ensure consistent joiner, mover, and leaver controls.