Oracle Fusion Security and Controls Consultant

This role has two parts

The first is owning Oracle Fusion security and application administration day to day for regions already live. That means designing and maintaining roles and privileges, managing data access, handling audit requests, auditing SaaS license usage, and knowing your way around security in the cloud environment well enough to answer questions no one else can.

The second half is quality gate work on an APAC rollout being delivered by a system integrator. You are reviewing what the SI produces before it reaches the business, and running the testing that determines whether UAT succeeds or falls apart.

Both halves sit inside the client’’s financial systems team. You are on the client side of the table, not the SI’’s.

What You Will Own

Security and application administration

• Support the existing Security and Controls implementation across North America and EU.
• Create, configure and maintain custom job roles, duty roles and privileges, including role hierarchies and inherited access.
• Assign and maintain role provisioning for users, including provisioning rules and role assignment mappings.
• Configure and maintain data access sets, data security policies and security profiles to control access at the business unit, ledger and organization level.
• Perform periodic access reviews and user access certification, and remediate inappropriate or excess access.
• Maintain segregation of duties across roles, identify conflicts and document mitigating controls where remediation is not possible.
• Handle audit requests end to end, producing access evidence and responding to auditor questions directly.
• Audit Oracle SaaS license usage and flag exposure.
• Assess the impact of Oracle quarterly updates on custom roles and security configuration, and remediate as needed.
• Maintain security documentation, including role catalogs and access matrices.

Design review and testing for the APAC rollout

• Review configuration workbooks and design specifications prepared by the SI, understand the underlying business scenarios, and confirm the design follows leading practice rather than creating manual work downstream.
• Confirm that test scenarios actually cover every user story for the modules in scope.
• Run Pre-UAT and subsequent test rounds across business scenarios, integrations and data conversion.
• Document issues clearly and call out the ones that would stop UAT from completing, early enough to matter.
• Review end user and system administration training guides written by the SI for accuracy against real requirements.

Working with the business

Act as an extension of the client’’s financial systems team on the Oracle Cloud Financials rollout.

Coordinate support activities across business users, the SI and internal systems teams., You are the client’’s check on the system integrator. The value here is in catching the design that would have created six months of manual reconciliation, and catching it before it gets built.

• Hands-on experience administering Oracle Fusion applications, including Security Console, custom role design, privileges, data security policies and data access sets.
• Working experience with Oracle Fusion Financials as a functional consultant, enough to read a configuration workbook and know whether the design will hold up in practice.
• Experience supporting audits, including producing access evidence and responding to auditor requests.
• Real testing experience: writing and reviewing test scenarios, tracing them back to user stories, executing test cycles and triaging defects by severity.
• Full lifecycle Oracle Cloud implementation exposure, from design through go-live and stabilization.
• Comfort working alongside a system integrator and raising problems with their deliverables constructively.
• Clear written communication. A meaningful part of this role is documentation that other people act on.

Good to Have

• Segregation of duties design and conflict remediation.
• Oracle SaaS license and subscription compliance experience.
• Retail industry background.
• Experience supporting multiple regions across different time zones.