Consultant - Oracle Security and Risk Management

PwC South East Asia Consulting; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 180,000; Full time

Job summary

PwC South East Asia Consulting seeks an Associate/Senior Associate to join our Oracle Risk and Security Management team in Southeast Asia. Build Oracle security controls, support risk, compliance, and SoD reviews for Oracle Cloud across client projects.

The role offers exposure to regional clients, workshops, and multi-industry transformation initiatives, with opportunities for knowledge transfer and go-live support across borders.

Qualifications

• 1–3 years of experience in Oracle, Cybersecurity, IT Risk, Internal Controls, Compliance, or ERP applications.
• Basic understanding of User Access Management, Security Roles, SoD, and risk controls.
• Strong analytical and problem-solving skills; good communication.
• Ability to work in a team-oriented consulting environment.

Responsibilities

• Support Oracle Security and Risk Management projects across Oracle Cloud applications.
• Support Security and Access, user management and control configuration.
• Assist in reviewing user access, security roles, and segregation of duties (SoD) controls.
• Support security assessments, compliance reviews, and risk management activities.
• Participate in requirement gathering sessions and client workshops.
• Assist with security configuration, role design, access provisioning, and user access reviews.
• Perform control testing, documentation reviews, and issue remediation tracking.
• Prepare process documentation, risk assessments, reports, and presentations.
• Support implementation and deployment of Oracle Risk Management and Security solutions.
• Conduct user training and knowledge transfer sessions.
• Collaborate with stakeholders to address security, compliance, and audit requirements.
• Support go-live, hypercare, and post-implementation activities.

Skills

Analytical skills

Communication & engagement

Team-oriented consulting

Oracle Security / IT risk

Job description

You’ll be joining our Oracle Consulting SEA team, a regional practice delivering Oracle Cloud transformation programmes across Southeast Asia. We are looking for an Associate/Senior Associate to join us in building the Oracle security controls for our clients as a Oracle Risk and Security Management consultant.

As a Certified Oracle Cloud partner, we help clients modernise Finance, HR, Supply Chain and Tax functions, unlock greater value from their Oracle investments, and successfully deliver complex cloud transformation initiatives.

Beyond local projects, our consultants have opportunities to collaborate across borders, work with regional clients, and gain exposure to complex transformation initiatives spanning multiple industries throughout Southeast Asia.

You’ll be joining a market-leading practice recognised by industry analysts such as Gartner and IDC MarketScape for its Oracle capabilities. Together, we help clients transform the way they operate, innovate and grow in an increasingly digital world.

Responsibilities

• Support Oracle Security and Risk Management projects across Oracle Cloud applications.
• Support Security and Access, user management and control configuration.
• Assist in reviewing user access, security roles, and segregation of duties (SoD) controls.
• Support security assessments, compliance reviews, and risk management activities.
• Participate in requirement gathering sessions and client workshops.
• Assist with security configuration, role design, access provisioning, and user access reviews.
• Perform control testing, documentation reviews, and issue remediation tracking.
• Prepare process documentation, risk assessments, reports, and presentations.
• Support implementation and deployment of Oracle Risk Management and Security solutions.
• Conduct user training and knowledge transfer sessions.
• Collaborate with stakeholders to address security, compliance, and audit requirements.
• Support go-live, hypercare, and post-implementation activities.

Associate (1–3 Years)

• 1–3 years of experience in Oracle, Cybersecurity, IT Risk, Internal Controls, Compliance, or ERP applications.

Basic understanding of:

• User Access Management.
• Security Roles and Permissions.
• Segregation of Duties (SoD)
• Risk and Compliance Controls.
• Governance and Internal Controls.
• Strong analytical and problem-solving skills.
• Good communication and stakeholder engagement skills.
• Ability to work in a team-oriented consulting environment.

Senior Associate (3–5 Years)

• 3–5 years of experience in Oracle Security, Risk Management, IT Audit, Cyber Risk, or ERP Security.
• Experience supporting Oracle Cloud Security and Risk Management projects.

Knowledge of:

• Security Design and Role Configuration
• Segregation of Duties (SoD) Analysis
• User Access Reviews
• Risk Assessments and Compliance Testing
• Security Controls and Governance Frameworks
• Experience gathering requirements, supporting solution implementation, and client training.
• Ability to interact with business stakeholders and provide practical recommendations.
• Experience preparing documentation, risk reports, and audit evidence.

Preferred Skills

• Exposure to Oracle ERP, HCM, SCM, or Oracle Cloud applications.
• Knowledge of ITGC, SOX, ISO 27001, NIST, or similar compliance frameworks.
• Experience in IT Audit, Cybersecurity, Internal Controls, or Governance Risk & Compliance (GRC).
• Understanding of identity and access management concepts.
• Oracle Cloud Security or Risk Management certifications are an advantage.