[Remote] Staff Oracle Cloud Security & Controls Lead – M&A Integrations

Note: The job is a remote job and is open to candidates in USA. Cypress HCM is recruiting for a Staff Oracle Cloud Security & Controls Lead to own security architecture, access governance, and controls for M&A integrations, carve-outs, and legal entity onboarding. The role establishes secure, compliant Oracle Cloud access and leads related design, controls, provisioning, testing, cutover, and production readiness.

Responsibilities

• Own the Oracle Fusion security architecture and role design standards across Finance Platform, including Job, Duty, and Data Roles, privileges, and Data Security Policies
• Set least-privilege, scalable role design principles, and decide when roles should be reused, extended, or newly created
• Design data security across multiple ledgers, business units, and legal entities
• Govern security for reporting (OTBI/BI Publisher) and for integration and service accounts
• Lead security design reviews and approve role and access changes
• Hands-on design, configuration, and troubleshooting of Oracle Fusion Job Roles, Duty Roles, Data Roles, security privileges, and Data Security Policies using Security Console and related tools
• Own the security and access workstream for acquisitions, carve-outs, and legal entity onboarding, from discovery through hypercare
• Assess acquired-company users, job responsibilities, organizational structures, and access requirements
• Define the Day 1 user and role mapping and access strategy across S2P, R2R, O2C, Tax, Treasury, and other Finance applications
• Define TSA and transitional-access requirements, and coordinate provisioning and deprovisioning through organizational transitions
• Build and maintain a reusable M&A security playbook (discovery templates, role mapping approach, Day 1 access model) that scales across acquisitions
• Own the technical design, implementation, and operational effectiveness of Oracle Cloud access controls supporting SOX and ITGC requirements, in partnership with Internal Controls and application control owners
• Design, maintain, and enhance SoD rules and sensitive-access monitoring in partnership with Internal Controls
• Perform SoD analysis, drive conflict remediation, and lead mitigating-control decisions where conflicts cannot be eliminated
• Design access certification and role review processes
• Partner with Internal Controls, Internal Audit, and external auditors on control design, testing, and evidence
• Define provisioning architecture, including HCM-driven role provisioning rules, auto-provisioning, SSO/IdP integration, and approval workflows
• Resolve complex provisioning, role inheritance, data access, and authorization issues
• Own regression testing of security roles for Oracle quarterly updates
• Own the security testing strategy across CRP, SIT, and UAT, covering role access, data access, SoD, and end-to-end business processes
• Lead mock cutovers and production security readiness, and validate Day 1 access
• Lead hypercare resolution and transition processes to steady-state support
• Provide technical leadership and guidance to consultants, security analysts, and implementation teams
• Advise Finance, IT, and Controls leaders on access risk, trade-offs, and remediation priorities
• Represent Oracle security and controls in architecture, program, and audit forums

Skills

• 10+ years of Oracle application security, controls, or enterprise application experience, including 5+ years with Oracle Fusion Cloud
• Expert knowledge of Oracle Fusion Security Console, RBAC, Job/Duty/Data Roles, privileges, and Data Security Policies
• Track record of leading security for at least one large Oracle Fusion implementation, M&A integration, or carve-out
• Hands-on SoD analysis, rule set design, conflict remediation, and mitigating-control experience
• Strong working knowledge of SOX, ITGC, and access control requirements, including experience working with auditors
• Experience with security across Oracle Fusion Financials and/or SCM business processes
• Experience with user provisioning architecture, HCM-driven provisioning, and security troubleshooting
• Experience leading security testing, cutover, and production stabilization
• Strong ability to influence cross-functional stakeholders and communicate access risk to senior leaders
• Experience with Oracle Risk Management Cloud (RMC) / Advanced Access Controls, or other GRC and access governance platforms
• Experience with SSO/IdP integration (e.g., Okta) and identity lifecycle management
• Experience with global implementations and multi-entity, multi-ledger environments
• Experience securing adjacent Finance applications (e.g., treasury, tax, or EPM platforms)
• Relevant certifications (e.g., Oracle Cloud Security, CISA, CISSP)

Company Overview