Application Security Analyst

Office of the State Controller; New York (NY); On-site; USD 76,000 - 114,000; Full time

Job summary

Office of the State Controller in the United States seeks an IT Security & Compliance Specialist I to support SAP HR/Payroll and Oracle Fusion Cloud NCFS security. You will manage security roles, data access, and aggregations across multiple environments, with on-call duties and production monitoring.

The role requires knowledge of SAP HR/Payroll security, Oracle Cloud Security, and IAM practices, plus the ability to coordinate with development teams and stakeholders to ensure compliant access

Qualifications

• Bachelor’s degree in computer science or a related IT field and one year experience in IT Security
• Associate degree in computer science or related IT field and two years experience in IT Security
• Equivalent combination of education and experience per Equivalency Guide

Responsibilities

• Monitor and process security role changes via Ivanti ticket system
• Support SAP HR/Payroll and cross-train on Oracle Fusion Cloud NCFS
• Create and maintain job roles, derived roles, abstract roles, data roles, and privileges
• Research security issues with clients and analysts
• Perform production system monitoring of security jobs and on-call duties

Skills

SAP HR / Payroll Security

Oracle Cloud Security

Identity Access Management

Separation of Duties

Office Software Proficiency

Oracle Fusion Security

Two-factor authentication

Security role management

Analytical thinking

Project management

Education

Bachelor’s degree in computer science or related IT field

One year IT security experience

Job description

Agency Office of the State Controller Division OSC Information Technology Job Classification Title IT Security & Compliance Specialist I (NS) Position Number 60087215 Grade DT08

About Us The State Controller serves as an independent resource to protect the financial integrity of the State and to promote accountability in an objective and efficient manner through its accounting, disbursing, payroll, internal controls, data management, eCommerce, and financial reporting systems that serve state agencies, employees, and the public. The foundational principles of the office are Integrity/Ethics, Objectivity, and Accountability. OSC’s overall goals are to optimize operational execution, manage risk effectively and efficiently, and foster a high-performance culture. OSC will provide excellent customer service while achieving those goals.

Description of Work Internal to State Government

This vacancy is only available to current employees of the State of North Carolina, including University employees.

NOTE: This job posting will close at 11:59 p.m. the night before the closing date.

Salary Range: The salary range for DT08 is $75,818- $113,727. The salary offered will be based on candidate’s education and experience; and availability of funds for this position.

Please Note: OSC does not use 3rd parties to conduct job interviews.

OSC is interested in every qualified candidate who is eligible to work in the United States. However, we cannot sponsor visas at this time.

Successful candidate will be subject to a criminal background check.

The mission of the Office of the State Controller (OSC) is to protect the financial integrity of the State and promote accountability in an objective and efficient manner.

Description of Work:

This position supports the state SAP HR/Payroll System and the Oracle Fusion Cloud NCFS System. Responsibilities include monitoring and processing Security Role Change Requests using the Ivanti ticket system. The Application Security Analyst’s primary responsibility will be supporting the SAP HR/Payroll, however cross training to also maintain Oracle Fusion Cloud NCFS System will be required. The position will process production support security requests utilizing the Ivanti Ticketing system from all 80 plus agencies and universities. Duties will also include security support for all requests and projects from the Functional and Development Teams related to the 14 development, training and production environments in the Oracle NC Financial System and the sandbox, development, quality and production landscapes in the SAP HR/Payroll System. The position is responsible for creating and maintaining job roles, duty roles, abstract roles, data roles. and aggregate privileges in the Oracle Fusion system as well as master, derived, and composite SAP roles as needed in ERP, FIORI, and BI/BOBJ, across all SAP landscapes. The Application Security Analyst will research application security issues as needed with clients and Functional Application Analysts. This position is also responsible for creating test accounts when required and regression testing security scripts in Oracle Fusion after upgrades and patches. The Application Security Analyst is responsible for performing production system monitoring of security jobs and on‑call duties when required.

Knowledge Skills and Abilities/Management Preferences

• Documented knowledge of structure-based security, derived roles, and composite roles in an SAP HR/Payroll environment
• Documented knowledge of Oracle Cloud Financials Security processes, role creation, security applications
• Documented knowledge of Separation of Duties, Identity Access Management, Security Processes and Procedures
• In‑depth knowledge of and documented ability to use Microsoft Office Products
• Knowledge of software installation and migration to manage complex projects
• Documented knowledge of Oracle Cloud Advanced Access Controls
• Documented knowledge of ADFDI and FBDI for Oracle Fusion Cloud
• Sufficient knowledge of HR / Payroll Systems, Financial and budgetary methods and operations/practices. Ability to comprehend, analyze and interpret organizational issues/procedures to make alterations in existing systems that support the organization.
• Excellent writing and verbal skills. Ability to prepare detailed and comprehensive reports and to present information clearly and concisely
• Ability to plan and organize/coordinate the day‑to‑day work of others. Ability to reorganize the work assignments of other technicians and/or analysts and adapt their workload, if necessary, to unanticipated changes.
• Working knowledge of technology architecture in a multi-layered environment, two-factor authentication, active directory integration, SAP proprietary roles and authorization objects as well as Oracle Fusion custom job roles and duty roles in a cloud‑based environment.
• Ability to manage statewide moderate to complex projects that can have significant impact to NC Employees in a fast‑paced environment.
• Strong analytical skills and able to make proactive decisions regarding technical modifications to prevent future problems, assessing all viable options and weighing all potential consequences.
• Excellent knowledge of security rules and how to grant/deny access based on users or groups
• Knowledge of UNIX desired
• Oracle Cloud Financials Security experience desired
• SAP HR / Payroll Security experience preferred
• Experience with some Oracle Cloud Financials EPM or OAC Security desired
• Experience with SAP State Government Support desired
• Experience with SAP Security in a Government environment desired

Minimum Education and Experience

Some state job postings say you can qualify by an “equivalent combination of education and experience.” If that language appears below, then you may qualify through EITHER years of education OR years of directly related experience, OR a combination of both. See the Education and Experience Equivalency Guide for details. NOTE: Transcripts must be uploaded to Workday and attached to your application to receive credit for any training and educational requirements, to qualify for the position. All degrees must be received from appropriately accredited institutions. All work history, training, and education must be listed on the official application, along with attached transcripts, to receive credit. Applications must be completed in full. “See Resume” or “See Attached” will not be accepted. Bachelor’s degree in computer science or a related IT related field or closely related field from an appropriately accredited institution and one year experience in IT Security; or Associate degree in computer science or a related IT related field or closely related field from an appropriately accredited institution and two years of experience in IT Security; or an equivalent combination of education and experience.

EEO Statement

The State of North Carolina is an Equal Employment Opportunity Employer and dedicated to providing employees with a work environment free from all forms of unlawful employment discrimination, harassment, or retaliation. The state provides reasonable accommodation to employees and applicants with disabilities; known limitations related to pregnancy, childbirth, or related medical conditions; and for religious beliefs, observances, and practices.

North Carolina State Government is one of the state’s largest employers, with over 76,000 employees all working toward a common goal: a safer and stronger North Carolina. We are a large organization comprised of various agencies, offices, and universities, each providing important public services. Eligible state employees are entitled to comprehensive benefits, including a variety of leave options, professional development opportunities, insurance, and more. To learn more about the benefits of being a North Carolina state employee, visit the N.C. Office of State Human Resources' website. Permanent, temporary, and time‑limited state government jobs can be found from the mountains to the coast.

State Application Resources/Frequently Asked Questions

Valuing Education and Experience The State of North Carolina values the knowledge and experience of our jobseekers and current state employees. Approximately 91 percent of state job classifications allow experience to be substituted for education or do not require a post‑secondary degree. Learn more about how you may qualify for a position through education or directly related experience, or a combination of both, with the Education and Experience Equivalency Guide. All job postings close at 11:59pm the night before the End Date on the posting.