Manager, Application Security & SOX IT

Cybersecurity Jobs; New York (NY); On-site; USD 124,000 - 186,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan

Life insurance

Disability benefits

Tuition assistance

PTO

Job summary

Paramount is seeking a Manager to lead application security architecture and SOX IT controls for Oracle environments, serving as SME for Oracle Fusion/EPM security with audit support focused on SoD, access governance, risk mitigation and evidence readiness across key platforms.

The role involves designing and maintaining Oracle Fusion and Oracle EPM security architecture, guiding ITGCs and internal policy alignment in ERP/Procurement/HCM, EPM and OIC, with responsibility for Substantial audit

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field.
• 5+ years of experience in Oracle Application Security and IT Audit/Compliance.
• Strong understanding of SOX compliance, COSO framework and ITGCs.
• Experience designing security roles across Oracle Fusion ERP/Procurement/HCM and Oracle EPM.
• Hands-on experience with Oracle IAM frameworks and Oracle Fusion Risk Management Cloud.

Responsibilities

• Create custom job roles and duty roles across Oracle Fusion ERP/Procurement/HCM, Oracle EPM, and FDI.
• Use Oracle IAM for user provisioning, de-provisioning, and identity lifecycle management.
• Define and govern security roles, privileges, and access controls within OIC.
• Oversee user access reviews and certification campaigns; support Oracle Access Governance for automated provisioning.
• Ensure all Oracle environments meet SOX, ITGCs, and internal security policy requirements.
• Implement and manage Oracle Fusion Risk Management Cloud for SoD and controls.
• Serve as primary contact for auditors with reports, evidence and walkthroughs.
• Identify vulnerabilities and SoD conflicts; design remediation plans.

Skills

Oracle Application Security

IT Audit & Compliance

SOX Compliance

COSO Framework

Communication Skills

Analytical Thinking

Cross-functional Collaboration

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Oracle Fusion

Oracle EPM

Oracle IAM

ODS/OIC (Oracle Integration Cloud)

Oracle Access Governance

Oracle Fusion Risk Management Cloud

Job description

Paramount is seeking an experienced manager to lead application security architecture and Sarbanes-Oxley (SOX) IT controls for Oracle environments. This role will serve as a subject matter expert (SME) for Oracle Fusion and Oracle EPM security, with audit support focused on segregation of duties, user access governance, risk mitigation, and evidence readiness across key platforms.

Role Overview

The Manager, Application Security & SOX IT will design, implement, and maintain Oracle Fusion and Oracle EPM security architecture. The position also provides SME guidance for application security and SOX compliance, including IT General Controls (ITGCs) and internal security policy alignment across Oracle Fusion ERP/Procurement/HCM, Oracle EPM, and Oracle Integration Cloud (OIC).

Key Responsibilities

• Create custom job roles and duty roles, and keep data security policies current in Oracle Fusion (ERP, Procurement, HCM), Oracle EPM, and FDI environments.
• Use Oracle IAM capabilities to support user provisioning, de-provisioning, and identity lifecycle management.
• Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC).
• Oversee user access reviews and certification campaigns; support opportunities to use Oracle Access Governance for automated provisioning and analytics.
• Ensure all Oracle environments meet SOX compliance, ITGCs, and internal security policy requirements.
• Implement, configure, and manage Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls) to continuously monitor and uphold segregation of duties (SoD).
• Act as the primary contact for internal and external auditors by providing reports, evidence, and system walkthroughs.
• Identify security vulnerabilities and potential SoD conflicts, then design and execute remediation plans.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
• 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance.
• Strong understanding of SOX compliance, the COSO framework, and IT General Controls (ITGC).
• Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.
• Hands-on experience managing security matrices and user access in Oracle Enterprise Performance Management.
• Solid knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks.
• Direct implementation experience with Oracle Fusion Risk Management Cloud for segregation of duties and transaction monitoring (AAC/AFC).
• Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security.
• Hands-on expertise or certification in Oracle Access Governance.
• Relevant professional certifications such as CISA, CRISC, CISSP, or Oracle Certified Security Specialist.
• Strong communication skills with the ability to explain complex technical security concepts in business-friendly terms for compliance requirements.
• Solid analytical and problem-solving skills with high attention to detail.
• Ability to collaborate effectively with cross-functional teams, including Finance, HR, IT, and Internal Audit.

Relevant Technologies

• Oracle Fusion
• Oracle EPM
• Oracle Integration Cloud (OIC)
• Oracle Identity and Access Management (IAM)
• Oracle Access Governance
• Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls)
• Oracle Fusion Risk Management Cloud (AAC/AFC)
• COSO
• IT General Controls (ITGC)
• SOX (Sarbanes-Oxley)

Location and Work Setting

New York, NY, US (onsite)

Compensation

• Salary: USD 124,000 - 186,000 per year
• Hiring Salary Range: $124,000.00 - 186,000.00

Benefits

• Medical, dental, vision
• 401(k) plan
• Life insurance coverage
• Disability benefits
• Tuition assistance program
• PTO or, if applicable, as otherwise dictated by the appropriate Collective Bargaining Agreement
• Bonus eligible