Functional Application Security Finance Managed Services Consultant

Cybersecurity Jobs; Arlington (VA); Hybrid; USD 73,000 - 122,000; Full time

Benefits offered by this job

Discretionary annual incentive program

Job summary

Deloitte is seeking a Functional Application Security Finance Managed Services Consultant to support Momentum ERP with a focus on security testing, access management, and embedding security requirements into delivery activities.

The role collaborates with product and engineering stakeholders to support access reviews, audits, and go-live readiness while coordinating security requirements across the delivery lifecycle.

Qualifications

• Bachelor’s degree required.
• 4+ years supporting Momentum ERP as an application security analyst.
• 3+ years configuring and testing RBAC and separation of duties.
• Experience with cloud-hosted enterprise apps and audit requirements.
• Active Top Secret clearance with SCI eligibility.
• Legally authorized to work in the United States without sponsorship.

Responsibilities

• Administer user access requests and lifecycle in Momentum.
• Configure roles, permissions, and RBAC aligned with duties.
• Conduct functional application-security testing across auth, sessions, data, and logic.
• Embed security requirements in user stories and designs.
• Support access reviews, audit requests, pre-release security reviews, and go-live readiness.
• Collaborate with product owners, developers, QA, and stakeholders for security.

Skills

Application security

RBAC

Access control

Security testing

Education

Bachelor's degree

Tools

Momentum ERP

Job description

Deloitte is seeking a Functional Application Security Finance Managed Services Consultant to support finance managed services for Momentum ERP. The role focuses on application security testing, access management, and embedding security requirements into delivery activities, while coordinating with product and engineering stakeholders to support access reviews, audit requests, and go-live readiness.

Location and Work Model

• Location: Rosslyn, VA (hybrid)
• On-site expectation: co-locate on average 5 times per week to Rosslyn, VA
• Commuting requirement: reside within a commutable distance of the assigned office with the ability to commute daily, if required, without overnight accommodations

Compensation

• Salary range: USD 72,900 - 121,500 per year

Role Responsibilities

• Administer user access requests and account lifecycle activities, including provisioning, modifying, and decommissioning accounts in accordance with cybersecurity controls and processes within Momentum.
• Configure and maintain user roles, permissions, and access profiles aligned with role based access control (RBAC) and separation of duties requirements.
• Conduct functional application-security testing across authentication, authorization, session management, data handling, business logic, and integrations.
• Embed security requirements in user stories, acceptance criteria, functional designs, and configuration changes, and identify security gaps to support closure activities.
• Partner with product owners, developers, quality assurance teams, and stakeholders to support access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Collaborate with stakeholders to inform enterprise resource planning strategy and roadmap decisions based on security, access-control, and operational needs.

Required Qualifications

• Education: Bachelor's degree
• Experience: 4+ years supporting Momentum ERP as an application security analyst, including user and application administration
• 3+ years configuring and testing role-based access controls, separation-of-duties controls, authentication, authorization, session management, data handling, and business logic controls in enterprise applications
• Experience supporting cloud-hosted enterprise applications subject to access-control and audit requirements
• Clearance: Active Top Secret security clearance required with eligibility for upgrade to SCI
• Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

• Momentum
• Momentum ERP
• Role based access control (RBAC)

Benefits

• You may be eligible to participate in a discretionary annual incentive program, subject to program rules, where any award depends on factors including individual and organizational performance.

Preferred Qualifications

• Experience executing security test cases aligned with business scenarios in Momentum applications
• Experience embedding security requirements in user stories, acceptance criteria, functional designs, and configuration changes
• Experience supporting access reviews, audit requests, pre-release security reviews, and go-live readiness assessments
• Experience validating handling of personally identifiable information (PII), financial data, or regulated data in enterprise applications