Oracle Cloud security

Need for a Secure Oracle Security and Controls environment

• IT processes should be automated to scale, secure, and sustain the digital ERP ecosystem.
• A need to standardize global risk and control frameworks with a focus on internal controls automation that is compliant with policies, procedures, and regulations. Digital transformation is an opportunity for clients to re-engineer their cyber strategies away from IT-centric cyber security to enterprise-wide cyber risk management.
• A need for increased insights into security event monitoring capabilities
• standardized processes that allow for predictable outcomes, allowing for more efficient allocation of resources to higher-value business processes should be implemented

• Support/Implement in User and Access Management activities
• Support/Implement team build Oracle Cloud ERP custom roles and controls
• Support/Implement in resolving any security/issues
• Support/Implement Risk Management Cloud Controls specific to Advance Access Controls (AAC) & Advance Financial Controls (AFC)
• Implement Reporting Security across different modules in ERP
• Participate in Client workshops to obtain the business process information and identify critical areas of Security improvements within these processes
• Participate in project management activities such as leading status calls, risk and issue management, escalations, invoicing, etc.
• Provide periodic status updates including potential risks and delays to the project delivery to project manager and client
• Mentor new assessors on tools and methodology to conduct cyber risk reviews and demonstrate good understanding of client specific cyber security policy and procedures
• Update project manager on potential risks and delays to the project delivery
• Generate innovative ideas and challenge the status quo
• Facilitate use of Client tools and methodologies to review, design and/or implement Application Security

Required Skills

• Overall, 2 to 3 years of relevant experience in Application security
• Good understanding of information security and risk frameworks
• Application Security Controls
• Demonstrate knowledge of key risk areas such as cyber risk, compliance risk and regulatory risk and Risk Management Cloud (RMC)
• Demonstrate knowledge in one or more of the following cyber risk domains, including:
• Security Governance and Management
• Security Policies and Procedures
• Security Architectures
• Identity Management
• Incident Response
• Experience with internal controls, risk assessments, business process and internal IT control testing or operational auditing
• Excellent verbal and written communication skills
• Excellent inter-personal skills

Preferred Skills

• Oracle Cloud Security
• Experience with internal controls, risk assessments, business process, and internal IT control testing or operational auditing
• Good understanding of legal and regulatory requirements around information security and data privacy, such as OCC Bulletin 29, FFIEC, HIPAA Security/Privacy, etc.
• Prior consulting experience