Security Engineer

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

• Bachelor’s degree in computer science, Information Security, Information Systems, or a related field.
• 3-8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.
• Strong understanding of:
• Identity and Access Management (IAM)
• Data classification
• Encryption technologies
• Authentication and authorization
• Secure SDLC
• Cloud security principles

Preferred Skills

• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.