The Role:
We are seeking an experienced Oracle Cloud Security Consultant with deep hands-on expertise in Access Controls and Compliance within Oracle ERP Cloud. The ideal candidate brings a strong audit mindset, a thorough understanding of role design and Segregation of Duties (SoD), and the ability to work cross-functionally with finance and IT teams in a fast-paced consulting environment.
This is a remote, contract-based engagement requiring availability during Eastern Standard Time (EST) business hours.
Responsibilities:
Manage user access, roles, and provisioning using Role-Based Access Control (RBAC) in Oracle ERP Cloud
Implement and maintain Oracle Risk Management Cloud (RMC) – with focus on Access Controls and Segregation of Duties (SoD)
Perform SoD analysis, conflict identification and resolution, and periodic access reviews (UAR – User Access Reviews)
Support internal and external audit processes, including SOX compliance, and maintain security control documentation
Partner with functional teams (Finance, Operations, IT) to align role structures with business processes and least-privilege principles
Identify and remediate access control gaps and policy violations across Oracle Cloud modules
Prepare audit-ready reports and evidence packages for compliance reviews
Requirements:
Experience
5+ years of hands-on experience in Oracle Cloud Security within Oracle ERP Cloud environments
Proven track record in role design, access provisioning, and RBAC governance
Direct experience working with Oracle Risk Management Cloud (RMC) – Access Controls and SoD modules
Experience supporting audit and compliance engagements, including SOX audits
Technical Skills
Oracle ERP Cloud Security: user management, role hierarchy, data security policies
Oracle RMC: Access Controls, SoD rule configuration, conflict resolution, and control monitoring
SoD analysis methodologies and access review (UAR) execution
Understanding of Oracle Finance modules: General Ledger (GL), Accounts Payable (AP), Accounts Receivable (AR), and related areas
Familiarity with audit evidence preparation and security control documentation
Soft Skills & Working Style
Professional working proficiency in English – required for client calls, documentation, and reporting
Available and responsive during EST business hours
Strong analytical thinking and attention to detail in compliance-sensitive environments
Ability to communicate technical findings clearly to non-technical stakeholders
Autonomous, organized, and delivery-focused in remote project settings
Nice to Have
Oracle Cloud certifications (Security, ERP, or Risk Management)
Experience with Oracle Identity Governance (OIG) or similar IAM platforms
Background in Big 4 or consulting firms supporting Oracle ERP implementations
Exposure to other ERP security frameworks (SAP GRC, etc.)
Originally posted on