[Hiring] Manager, Application Security & SOX IT @Paramount

Role Description

We are seeking a highly skilled and proficient Manager, Application Security and Compliance to lead the design, implementation, and maintenance of our Oracle Fusion and Oracle EPM security architecture. In this role, you will serve as the Subject Matter Expert (SME) for application security and Sarbanes-Oxley (SOX) compliance across our enterprise systems. You will be in charge of ensuring strict Segregation of Duties (SoD), managing user access governance, and mitigating risk across Oracle Fusion (ERP, Procurement, and HCM), Oracle EPM, and Oracle Integration Cloud (OIC). The ideal candidate brings a blend of technical expertise in Oracle Identity and Access Management (IAM) and a deep knowledge of IT General Controls (ITGC) and compliance frameworks.

Responsibilities

• Security Architecture and Role Management Design and Maintenance: Create custom job roles and duty roles. Keep data security policies updated in Oracle Fusion (ERP, Procurement, HCM), Oracle EPM, and FDI environments.
• Identity Management: Leverage Oracle IAM to manage user provisioning, de-provisioning, and identity lifecycles.
• OIC Security: Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC).
• Access Governance: Oversee user access reviews and certification campaigns, with an opportunity to leverage Oracle Access Governance for automated provisioning and analytics.
• Compliance & Risk Management:
• SOX Compliance: Ensure all Oracle environments strictly adhere to SOX compliance, ITGCs, and internal security policies.
• Risk Mitigation: Implement, configure, and manage Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls) to continuously monitor and uphold Segregation of Duties (SoD).
• Audit Support: Serve as the primary point of contact for internal and external auditors, providing necessary reports, evidence, and system walkthroughs.
• Remediation: Identify security vulnerabilities or SoD conflicts and proactively design and execute remediation plans.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
• 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance.
• Strong knowledge of SOX compliance, COSO framework, and IT General Controls (ITGC).
• Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.
• Hands-on experience managing security matrices and user access within Oracle Enterprise Performance Management.
• Sound knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks.
• Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) for SoD and transaction monitoring.
• Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security.

Additional Qualifications

• Hands-on expertise or certification in Oracle Access Governance.
• Relevant professional certifications (e.g., CISA, CRISC, CISSP, or Oracle Certified Security Specialist).
• Great communication skills. Ability to explain complex technical security concepts in simple terms for business compliance requirements.
• Solid analytical and problem-solving skills with high attention to detail.
• Ability to collaborate successfully with cross-functional teams, including Finance, HR, IT, and Internal Audit.

Benefits

• Attractive compensation and comprehensive benefits packages.
• Generous paid time off.
• An exciting and fulfilling opportunity to be part of one of Paramount’s most dynamic teams.
• Opportunities for both on-site and virtual engagement events.
• Unique opportunities to make meaningful connections and build a vibrant community, both inside and outside the workplace.