Address
Form of work Skills & Experience:
Oracle Risk / GRC Advanced Access Controls (AAC) & Configuration Controls
Oracle Risk / GRC Transaction Controls & Preventative Controls
Oracle Risk / GRC Advanced HCM Controls
Experience level:
- Establish/understand client control objectives
- Align design to industry standards of COSO/COBIT/SOX/GDPR/NIST/ISO27001 security frameworks
- Survey, assess and measure enterprise risk related to Oracle Cloud ERP transactions, operations
- Develop governance and control within the greater enterprise risk infrastructure
- Write Policies
- Translate policies to Oracle Risk Cloud controls
- Design, implement, test Oracle Risk Cloud controls
- Detective & Process Controls - design and build across Access, Configuration and Transactions
- Preventative Controls - requirements, analysis, write controls across multiple modules, create reports and alerts
Oracle Risk / GRC Advanced Access Controls (AAC) & Configuration Controls
- Design and build Access Controls definition
- Create Segregation of Duties (SoD) roles, functions, reporting
- Capture Preventative SoD requirements, build
- Perform SoD simulations
- Analysis, recommend cross-platform risk and controls
- Report and remediate SoD violations
- Capture, audit, report on application configuration changes
Oracle Risk / GRC Transaction Controls & Preventative Controls
- Capture requirements and design Transaction Controls
- Configure Duplicate payments sensoring, Employee reimbursements controls
- Design and build - continuous audit automation
- Concentrate on high risk operations workstreams: Procure to Pay, Expenses, cash out
Oracle Risk / GRC Advanced HCM Controls
- Data Privacy and Security Analysis
- Payroll and Payment fraud detection rules define
Experience level:
- Bachelors Degree or equivalent work experience
- Typically five plus years security and / or cyber risk management experience in a mid- to large-enterprise environment
- Ability to understand IT business processes, management objectives, risk appetite and tolerances and impact of changes to risk profiles
- Privacy knowledge CCPA/CPRA, LGPD, GDPR, etc.
