{"id":2569329,"url":"https://alion.io/job/oceaneering-international-sr-manager-it-security-risk","title":"Sr. Manager, IT Security & Risk","company":{"id":176562,"name":"Oceaneering International","domain":"oceaneering.com","url":"https://alion.io/company/oceaneering-international","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":89,"open_postings":34,"ghost_share":0,"stale_share":0.647,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Management","role_family":"Management","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":71000,"max_usd":171000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2934},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"Oracle ERP","optional":false}],"status":"live","first_seen_at":"2026-10-14T19:32:56Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-28T21:22:34Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Overview\nOceaneering’s Enterprise Applications organization enables secure, reliable, and compliant business operations through enterprise platforms, governance, and support. The Security & Controls function partners with business process owners, Internal Audit, external auditors, Cybersecurity, Compliance, and IT delivery teams to manage application security, access governance, segregation of duties, controls, and audit readiness across the ERP landscape.\nPosition Summary\nThe Senior Manager, Security & Controls leads the day-to-day delivery and strategic advancement of Security & Controls for Oracle Fusion Cloud ERP and Costpoint ERP. Reporting to the Sr. Director - Enterprise Applications, this role is accountable for application security, user access governance, segregation of duties, controls design and testing, compliance, audit support, service levels, staffing, reporting, and continuous improvement. The position will build and operate a sustainable, risk-based S&C capability that protects Oceaneering’s enterprise applications while enabling efficient business operations.\nDuties and Responsibilities\nOperational Leadership and Service Delivery\nOwn end-to-end delivery of the Security & Controls function across Oracle Fusion Cloud ERP and Costpoint ERP, including provisioning, access reviews, controls testing, incident and request resolution, audit support, and reporting.\n\nDefine, publish, monitor, and continuously improve service levels and performance measures for access requests, security incidents, controls execution, and audit support.\n\nManage the operating model, capacity plan, staffing mix, budget, priorities, risks, and delivery commitments for the S&C team.\n\nEnsure documented procedures, runbooks, escalation paths, cross-training, and business continuity coverage are maintained for critical S&C services.\n\nApplication Security and Access Governance\nSet direction for application security architecture and governance across Oracle Fusion Cloud ERP and Costpoint ERP, including role design, least privilege, privileged access, and segregation-of-duties standards.\n\nGovern role catalogs, personas, job-to-role mappings, approval workflows, sensitive access, and periodic user access certifications.\n\nOwn segregation-of-duties and sensitive-access rulesets, risk ratings, mitigating controls, exception processes, and periodic reviews.\n\nDirect security remediation and role redesign activities, including resolution of inherited, custom, and cross-application access conflicts.\n\nPartner with Identity and Access Management, Cybersecurity, infrastructure, integration, functional, and business teams to ensure consistent joiner, mover, and leaver controls.\n\nControls, Automation, and Continuous Improvement\nLead automation of access requests, approvals, segregation-of-duties checks, access certifications, controls testing, monitoring, evidence generation, and reporting.\n\nAdvance the function from periodic and manual controls toward continuous, evidence-generating controls where practical and risk appropriate.\n\nMaintain a prioritized S&C roadmap with measurable improvements in control effectiveness, cycle time, quality, coverage, and effort.\n\nAssess ERP releases, enhancements, integrations, and configuration changes for security and controls impacts before production deployment.\n\nCompliance, Audit, and Risk Management\nServe as the senior S&C point of contact for internal and external auditors for Oracle Fusion Cloud ERP and Costpoint ERP application security and controls.\n\nCoordinate control walkthroughs, evidence, testing support, issue responses, and remediation through closure.\n\nEnsure control evidence is complete, accurate, timely, traceable, and retained in accordance with applicable requirements.\n\nEscalate residual risks with documented business impact, compensating controls, risk acceptance, accountable ownership, and target dates.\n\nMaintain alignment with applicable financial reporting, contractual, regulatory, cybersecurity, and internal control requirements.\n\nLicense and Consumption Governance\nMaintain an evidenced view of access-driven license and consumption demand across supported ERP platforms.\n\nGovern dormant account reviews, unnecessary access removal, role rationalization, and the license impact of security design decisions.\n\nPartner with Procurement, Finance, and application owners to support renewals, true-ups, audits, and optimization opportunities.\n\nPeople and Stakeholder Leadership\nRecruit, lead, develop, and retain a high-performing S&C team; establish objectives, accountability, succession plans, and development priorities.\n\nCoach managers and team leads while building broader capability across Oracle Fusion Cloud ERP, Costpoint ERP, controls, audit, and access governance.\n\nBuild trusted relationships with business process owners, Finance, HR, Supply Chain, Government/Defense stakeholders, Internal Audit, external auditors, Cybersecurity, Compliance, Legal, and IT leaders.\n\nTranslate technical security and controls issues into clear business risk, impact, options, and recommended decisions for leadership.\n\n Supervisory Responsibilities\nThis position has supervisory responsibilities for Security & Controls personnel and may oversee employees, contractors, and managed service resources supporting Oracle Fusion Cloud ERP and Costpoint ERP.\nReporting Relationship\nReports to the Sr. Director - Enterprise Applications.\n\nWorks closely with Enterprise Applications leadership, Cybersecurity, Internal Audit, Compliance, Finance, HR, Supply Chain, business process owners, external auditors, and implementation or support partners.\n\n Qualifications\nREQUIRED\nBachelor’s degree in Management Information Systems, Computer Science, Accounting, Finance, Cybersecurity, or a related discipline.\n\n7+ years of experience in ERP application security, controls, access governance, audit, implementation, or managed services, including at least three years in a leadership capacity.\n\nMinimum 5 years of experience with Oracle Fusion Cloud ERP security and controls, including role design, access provisioning, segregation of duties, sensitive access, and controls evidence.\n\nMinimum 5 years of experience presenting control design, risk, evidence, remediation, and findings to internal and external auditors and senior stakeholders.\n\nStrong written, verbal, analytical, problem-solving, and executive communication skills.\n\nMust be a U.S. citizen or U.S. permanent resident.\n\nDESIRED\nOracle Risk Management Cloud experience, including Advanced Access Controls, Advanced Financial Controls, and Access Certification.\n\nExperience managing security and controls for Costpoint ERP or demonstrated experience leading S&C across multiple regulated or financially significant ERP platforms.\n\nExperience leading end-to-end ERP security implementations through design, build, test, deployment, stabilization, and sustainment.\n\nIdentity governance, privileged access management, self-service access request, or approval workflow implementation experience.\n\nControls automation, continuous monitoring, automated testing, analytics, and evidence management experience.\n\nProfessional certification such as CISA, CISM, CISSP, CIA, CPA, or an Oracle Cloud certification.\n\nExperience supporting government contracting, aerospace and defense, or other regulated operating environments.\n\nManaged service or shared service operating model experience across multiple geographic locations and time zones.\n\nKnowledge, Skills, Abilities, and Other Characteristics\nBroad knowledge of ERP security, access governance, segregation of duties, internal controls, audit practices, and technology risk management.\n\nAbility to balance control effectiveness, user experience, operational efficiency, regulatory needs, and business risk.\n\nAbility to establish governance, standards, metrics, service levels, operating procedures, and sustainable accountability.\n\nAbility to manage multiple priorities, resolve escalations, and communicate decisions in a complex, global, matrixed environment.\n\nAbility to build credibility and influence across technical, functional, audit, compliance, and executive stakeholder groups.\n\nCommitment to confidentiality, professional judgment, ethical conduct, and a respectful workplace culture.\n\nWorking Conditions\nThis position is considered OFFICE WORK and is characterized as follows:\nAlmost exclusively indoors during the day and occasionally at night.\n\nOccasional exposure to airborne dust in the workplace.\n\nWork surface is stable and flat.\n\nMay require occasional travel and work outside normal business hours to support audits, releases, incidents, or global operations.\n\nPhysical Activity/Requirements\nThe physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nThis position is considered LIGHT work.\n\nOCCASIONAL\nFREQUENT\nCONSTANT\nLift up to 20 pounds\nClimbing, stooping, kneeling, squatting, and reaching\nLift up to 10 pounds\nStanding\nRepetitive movements of arms and hands\nSit with back supported","description_format":"text","description_chars":9213,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Marine & Ocean Engineering","Information Security","Underwater & Marine Robotics","Oil & Gas"],"lifecycle":[{"event":"open","at":"2026-10-14T22:31:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 2","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":2,"median_offered_wage_usd":94167,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.603,"p_room":0.75,"age_days":13,"expected_fill_days":18,"reasons":["conf:0","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/oceaneering-international-sr-manager-it-security-risk","json_url":"https://alion.io/job/oceaneering-international-sr-manager-it-security-risk.json","meta":{"generated_at":"2026-10-28T23:48:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32702,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":176562},"rest":"https://alion.io/mcp/rest/get_company?id=176562"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foceaneering-international-sr-manager-it-security-risk"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foceaneering-international-sr-manager-it-security-risk"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foceaneering-international-sr-manager-it-security-risk"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/oceaneering-international-sr-manager-it-security-risk\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foceaneering-international-sr-manager-it-security-risk"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2569329}},{"tool":"search_jobs","arguments":{"company":"oceaneering.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2569329},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}