Oracle Security and Internal Controls Manager

Platform Securityprofessionals develop and deliver solutions - including design and implementation of Oracle application Security Roles, Segregation of Duties Analysis Rules, Security Role Provisioning solutions, Security Workflow, Security Analytics, Enterprise GRC Solutions, Automated External Application Scanning, and Automated Source Code Analysis - that minimize the impact of internal and external manipulation of applications to access, steal, modify, or delete sensitive data.

We are currently looking for professionals for ourPlatform Securitypractice with extensive experience in the following:

You Are:

You are an experienced risk and controls leader who can translate business, regulatory, and technology requirements into a practical internal-control strategy for platform transformation. You bring strong Oracle Fusion knowledge, sound judgment, and the ability to lead multidisciplinary teams through complex design and implementation decisions.

As an Internal Controls Manager, you will help clients design and implement robust governance, risk, compliance, security, and internal-control capabilities. You will lead the design, testing, implementation, and adoption of controls tailored to each clients transformation objectives, while identifying opportunities to use AI, analytics, automation, and standardization to strengthen the control environment.

You are comfortable operating at both strategic and delivery levels: advising senior stakeholders, managing engagement commitments, resolving issues, developing teams, and ensuring that solutions are usable, sustainable, and ready for operation.

The Work (Key Responsibilities):

Develop, refine, and implement internal-control strategies and solutions tailored to Oracle-enabled platform transformations.

Translate business, regulatory, security, and compliance requirements into future-state control and governance requirements.

Identify transformation-related and emerging risks, assess their potential impact, and define practical mitigation approaches.

Apply AI, analytics, automation, and standardization to improve risk identification, control design, monitoring, and operating efficiency.

Lead client engagements and workstreams, ensuring deliverables meet contractual commitments, work-plan objectives, quality expectations, and client priorities.

Build trusted client relationships through regular interaction, a strong understanding of the clients business, and clear communication of expectations, decisions, risks, and dependencies.

Lead workshops and working sessions with business, technology, compliance, internal audit, and executive stakeholders.

Manage work planning, resource coordination, status reporting, issue escalation, quality review, and delivery risks across assigned workstreams.

Identify regulatory and compliance requirements applicable to the clients platform and finance transformation.

Assess current-state business-process controls and ITGCs to determine whether they adequately address regulatory, operational, financial-reporting, security, and transformation risks.

Design future-state controls and embed them throughout the system development lifecycle, including design, system integration testing, user acceptance testing, pre-go-live effectiveness testing, control-owner training, deployment, and hypercare.

Develop clear control documentation, test procedures, evidence requirements, implementation recommendations, and remediation plans.

Design, implement, or assess Oracle Risk Management Cloud access controls, configuration controls, and transaction controls.

Design and evaluate Oracle application roles, segregation-of-duties rules, user provisioning, security workflows, and security analytics across functional and technical domains.

Monitor and evaluate internal controls within Oracle Cloud ERP and HCM to support data integrity, security, and compliance.

Design and implement effective joiner, mover, and leaver processes that support sustainable user-access governance.

Participate in business-development activities, including solution development, proposals, estimates, client presentations, and reusable offerings.

Contribute to engagement planning and align delivery activities with client business objectives and transformation milestones.

Coach, mentor, and develop team members while providing quality oversight, timely feedback, and opportunities for growth.

Contribute to the continued growth of the Platform Internal Controls practice through knowledge sharing, innovation, and development of repeatable assets and methods.

Heres What You Need (Basic Qualifications)

Minimum of 5 years of experience designing, implementing, and/or assessing business-process risks and controls across business cycles such as Record to Report, Procure to Pay, Order to Cash, Core HR, or similar processes.

Minimum of 5 years experience assessing current-state control environments, identifying transformation-related risks, and designing future-state business-process controls and ITGCs.

Minimum of 2 years experience leading a workstream or project team responsible for internal controls, risk management, security, or compliance within an ERP business transformation.

Bachelors degree or equivalent (minimum 12 years) work experience. (If Associates Degree, must have minimum 6 years work experience)

.     Travel will be required for this role.  The amount of travel will vary from 0 to 100% depending on business need and client requirements.

Bonus Points If You Have (Preferred Skills):

Industry-recognized professional certification such as CPA, CISA, or CIA.

Experience working for a Big Four firm or global systems integrator.

Oracle certification in Core HR, Financials, Procurement, Cloud Security Foundation, or Cloud Security Professional.

Experience with Oracle Risk Management Cloud, including access controls, configuration controls, and/or    transaction controls.

Experience designing or evaluating Oracle application roles, segregation-of-duties rules, user provisioning, security workflows, and security analytics.

Experience applying AI, analytics, or automation to risk identification, control design, testing, optimization, standardization, or monitoring.

Experience facilitating workshops and communicating risk, controls, and security requirements to business, technology, compliance, internal audit, and executive stakeholders.

Experience supporting business development through solution development, proposals, estimates, and client presentations.

Demonstrated ability to coach and develop team members and provide quality oversight across engagement deliverables.

Strong leadership, problem-solving, prioritization, and multitasking capabilities in a client-service environment.

Exceptional interpersonal, relationship-building, presentation, and written communication skills.

Proactive, adaptable, and committed to continuous learning as technologies, regulations, and industry practices evolve.

Experience managing client-facing delivery, including work planning, resource coordination, status reporting, issue escalation, quality review, and delivery against agreed objectives.