ERP & Cloud Security Specialist (IAM, GRC, Risk)

Falcon Smart IT (FalconSmartIT); Phoenix (AZ); On-site; USD 110,000 - 150,000; Full time

Job summary

Falcon Smart IT (FalconSmartIT) is seeking a seasoned information security professional in Phoenix to perform data security assessments across Finance, Supply Chain, and HCM apps. You will review architectures, APIs, and data flows to identify risks, focusing on IAM, encryption, RBAC, and SoD across cloud platforms.

The role requires 3–8+ years in information security or GRC, with strong communication and cross-functional collaboration skills to support audits and remediation efforts.

Qualifications

• Bachelor's degree in computer science, information security, information systems, or a related field.
• 3–8+ years of experience in information security, cybersecurity, governance, risk, compliance (GRC), or ERP security.
• Experience with security assessments of SaaS platforms, preferred- Finance, Supply Chain, and Oracle HCM.
• Strong understanding of Identity and Access Management (IAM). Encryption technologies.
• Authentication and authorization Secure SDLC Cloud security principles.
• Preferred Skills Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.
• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.
• Required Qualifications Information Security Cyber Security Governance, Risk, Complaince (GRC), Data Protection IAM, Encryption.

Responsibilities

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including PII, financial, payroll, and supplier information.
• Evaluate IAM, RBAC, SoD, and privileged access controls.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during projects.
• Review encryption standards for data at rest and in transit.

Skills

IAM

Encryption

Cloud security

Secure SDLC

Vulnerability mgmt

RBAC

SoD

GRC

Data protection

Threat modeling

Education

Bachelor's degree in CS/InfoSec/related field

Tools

Java

Python

AWS

Azure

GCP

Job description

Falcon Smart IT (FalconSmartIT) is seeking a seasoned information security professional in Phoenix to perform data security assessments across Finance, Supply Chain, and HCM apps. You will review architectures, APIs, and data flows to identify risks, focusing on IAM, encryption, RBAC, and SoD across cloud platforms.

The role requires 3–8+ years in information security or GRC, with strong communication and cross-functional collaboration skills to support audits and remediation efforts.