Oracle HCM Cloud Security Specialist

Oracle HCM Cloud Security Specialist
Role Overview
We are seeking an experienced Oracle HCM Cloud Security Specialist with strong expertise in Oracle Fusion Security, Governance, Risk & Compliance (GRC), and audit controls. The ideal candidate will be responsible for designing, implementing, and maintaining robust security frameworks within Oracle HCM Cloud while ensuring compliance with organizational policies, regulatory requirements, and industry best practices.
Key Responsibilities
Design, implement, and maintain Oracle HCM Cloud security models to safeguard sensitive HR and organizational data.
Configure and manage Data Roles, Job Roles, Duty Roles, Privileges, and Role Hierarchies in accordance with the principle of least privilege.
Administer and maintain Areas of Responsibility (AORs), User Administration, and security configurations across Oracle Fusion applications.
Perform security assessments, role design, provisioning reviews, and segregation of duties (SoD) analysis.
Configure, monitor, and support Oracle Risk Management Cloud (RMC), including Advanced Access Controls (AAC) and Advanced Financial Controls (AFC).
Partner with functional and technical teams to identify security risks, compliance gaps, and access management issues, and implement effective remediation plans.
Support SOX, internal, and external audits by providing security documentation, evidence, and control testing.
Implement and maintain IT General Controls (ITGCs) and security controls aligned with SOX, ISO 27001, and other regulatory compliance requirements.
Conduct user access reviews, security troubleshooting, and remediation activities to maintain compliance and operational efficiency.
Assist in the development and enforcement of security governance policies, standards, and procedures.
Monitor and evaluate security risks and recommend enhancements to strengthen Oracle Cloud security posture.
Required Qualifications
Bachelor's degree in Information Technology, Computer Science, Information Security, Accounting Information Systems, or a related field.
3+ years of experience implementing, administering, or supporting Oracle Cloud Security and Controls engagements.
Strong understanding of Oracle Fusion applications, including:
HCM Cloud
Financials (ERP)
Supply Chain Management (SCM)
Security Administration
Business Process Controls
Hands-on experience with Oracle Risk Management Cloud (RMC), including AAC and AFC.
Experience navigating and configuring Oracle Fusion application security and administration modules.
Solid understanding of:
Role-Based Access Control (RBAC)
Segregation of Duties (SoD)
User Provisioning and Access Governance
Enterprise Security Frameworks
Experience supporting SOX compliance, ITGC testing, internal audits, risk assessments, and compliance initiatives.
Knowledge of information security principles, methodologies, technologies, and industry best practices.
Working knowledge of Oracle Database concepts, Oracle Security Architecture, and GRC frameworks.
Strong analytical, problem-solving, and troubleshooting skills.
Ability to communicate effectively and collaborate with business stakeholders, auditors, and technical teams.
Preferred Qualifications
Experience with Oracle Cloud implementations and security transformation projects.
Working knowledge of PL/SQL queries for security analysis and reporting.
Proficiency in Microsoft Excel and Access for data analysis, reconciliation, and audit support.
Certifications such as:
Oracle Cloud Security Certifications
CISA
CRISC
CISSP
ISO 27001 Lead Implementer/Auditor (preferred)

Work arrangement
Hybrid