Lead Consultant - Oracle Risk Management

PwC South East Asia Consulting; Kuala Lumpur; On-site; MYR 240,000 - 420,000; Full time

Job summary

PwC South East Asia Consulting's Oracle Consulting SEA team is a regional practice delivering Oracle Cloud transformation programmes across Southeast Asia. You will lead Oracle Security, Risk Management, and Compliance engagements across Oracle Cloud applications and work with ERP, HCM, and SCM teams to embed controls.

We value experience in SOX, ITGC, ORMCS, and risk analytics, with opportunities to collaborate across borders on complex transformation initiatives and contribute to business

Qualifications

• 6–10+ years experience in Risk Management, IT Risk, Oracle Security, Cybersecurity, Internal Controls, Compliance, or GRC.
• Certified in Oracle Risk Management Cloud (ORMC).
• Experience with Oracle Cloud applications: ERP, HCM, SCM.
• Strong knowledge of user access, SoD, compliance, and risk assessments.
• Ability to communicate complex risk matters to executives.

Responsibilities

• Lead Oracle Security, Risk Management, and Compliance engagements across Oracle Cloud apps.
• Design and implement ORMC controls, AAC, FRC, and transaction controls.
• Configure preventive and detective controls for SoD and sensitive access monitoring.
• Conduct risk reviews, SoD analysis, and remediation planning.
• Support SOX, ITGC, and internal audit requirements using ORMC.
• Design risk analytics, control dashboards, and compliance reporting.
• Collaborate with ERP Cloud functional teams to embed controls in processes.
• Drive compliance initiatives with internal controls and regulatory requirements.
• Collaborate with Cyber, Data & Technology Risk teams on security initiatives.
• Lead and mentor junior team members; contribute to business development.

Skills

Risk Management

Oracle Security

GRC

Cybersecurity

Internal Controls

SoD (Segregation of Duties)

ORMC

Project Management

Stakeholder Engagement

Regulatory Compliance

Tools

Oracle ERP Cloud

Oracle HCM Cloud

Oracle SCM Cloud

ORMC

IAM / PAM

Job description

You’ll be joining our Oracle Consulting SEA team, a regional practice delivering Oracle Cloud transformation programmes across Southeast Asia.

As a Certified Oracle Cloud partner, we help clients modernise Finance, HR, Supply Chain and Tax functions, unlock greater value from their Oracle investments, and successfully deliver complex cloud transformation initiatives.

Beyond local projects, our consultants have opportunities to collaborate across borders, work with regional clients, and gain exposure to complex transformation initiatives spanning multiple industries throughout Southeast Asia.

You’ll be joining a market-leading practice recognised by industry analysts such as Gartner and IDC MarketScape for its Oracle capabilities. Together, we help clients transform the way they operate, innovate and grow in an increasingly digital world.

Responsibilities

• Lead Oracle Security, Risk Management, and Compliance engagements across Oracle Cloud applications.
• Design and implement ORMC Access Controls, Advanced Access Controls (AAC), Financial Reporting Compliance (FRC), and Transaction Controls.
• Configure preventive and detective controls for segregation of duties and sensitive access monitoring.
• Conduct security role reviews, risk assessments, and Segregation of Duties (SoD) analysis; identify access risks and recommend practical remediation plans for SoD violations.
• Support compliance frameworks such as SOX, ITGC, and internal audit requirements using ORMC capabilities.
• Design risk analytics, control monitoring dashboards, and compliance reporting.
• Work closely with Oracle ERP Cloud functional teams (Finance, Procurement, Projects, HCM) to embed controls into business processes.
• Drive compliance initiatives aligned with internal controls, regulatory requirements, and industry best practices.
• Collaborate with Cyber, Data & Technology Risk teams on security and risk management initiatives.
• Lead, coach, and mentor junior team members while supporting talent development and capability building.
• Contribute to business development, proposal preparation, and practice growth initiatives.

Essential Skills and Experience

• 6–10+ years of experience in Risk Management, IT Risk, Oracle Security, Cybersecurity, Internal Controls, Compliance, or Governance Risk & Compliance (GRC).
• Certified in Oracle Risk Management Cloud (ORMC).
• Experience supporting other Oracle Cloud applications such as:- Oracle ERP Cloud, Oracle HCM Cloud, Oracle SCM Cloud.
• Strong knowledge of:- User Access Management, Security Roles & Provisioning, Segregation of Duties (SoD), Compliance & Internal Controls, Risk Assessments, Governance, Risk and Compliance Frameworks.
• Experience conducting risk reviews, compliance assessments, and control testing.
• Experience leading client workshops, requirement-gathering sessions, and stakeholder discussions.
• Strong understanding of risk and control frameworks such as:- SOX, ITGC, ITAC, ISO 27001, NIST, COBIT.
• Experience supporting Oracle implementation, transformation, or cloud migration projects.
• Ability to communicate complex risk and security matters to business and executive stakeholders.
• Strong project management, analytical, problem-solving, and presentation skills.
• Experience leading teams and managing multiple priorities simultaneously.

Preferred Skills

• Experience with Oracle Risk Management Cloud (ORMC), Advanced Access Controls, or Oracle Security Governance.
• Exposure to Oracle Cloud Infrastructure (OCI), AWS, Azure, or Google Cloud platforms.
• Knowledge of Identity & Access Management (IAM), Privileged Access Management (PAM), and Cloud Security.
• Experience in IT Audit, Cyber Risk, Data Risk, or Technology Risk Consulting.
• Understanding of ERP controls and end-to-end business processes across Finance, HR, Procurement, and Supply Chain.

Preferred Certifications

• Oracle Cloud Security Certification.
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• AWS Certified Cloud Practitioner / Solutions Architect.
• Microsoft Certified: Azure Administrator / Security Engineer.