Note: The job is a remote job and is open to candidates in USA. Miracle Software Systems, Inc is seeking an Oracle Security Analyst to design, build, and operate IT general controls for its Oracle Cloud environment. The role involves establishing security and operations controls to meet SOX/ICFR requirements and managing those controls autonomously.
Responsibilities
- Design, build, and operate the IT general controls (ITGCs) that govern its Oracle Cloud environment
- Stand up and, where needed, fully rebuild a defined set of security, change-management, and operations controls to meet SOX / ICFR requirements
- Operate those controls on an ongoing basis
Skills
- 6+ years in IT security, IT audit, or IT controls
- Hands-on SOX / IT general controls experience — designing and operating controls
- 3+ years hands-on Oracle Fusion Cloud application security: Security Console, role design, data and function security, and role-to-privilege mapping
- Demonstrated ability to perform manual segregation-of-duties analysis — ruleset development, conflict identification, and mitigating controls — without reliance on an automated GRC platform such as Oracle RMC
- Proven experience both designing/building and operating ITGCs in a production ERP environment
- Strong documentation and Excel-based analysis skills
- Excellent written and verbal communication and stakeholder management; able to work independently in a fully remote setting
- Authorized to work in the United States
- Hands-on security experience with Oracle EPM, Oracle Integration Cloud (OIC), and/or Oracle Cloud Infrastructure (OCI)
- Familiarity with Oracle Risk Management Cloud concepts (Advanced Access Controls, Advanced Financial Controls), even if not used in this environment
- Experience with Freshservice or a comparable ITSM ticketing platform
- Bachelor's degree in Information Systems, Accounting, Cybersecurity, or a related field — equivalent experience accepted in lieu of a degree
- CISA — Certified Information Systems Auditor
- CRISC — Certified in Risk and Information Systems Control
- OCI Security — Oracle Cloud Infrastructure IAM / Security Professional
- CISSP — broader information-security credential; a plus
Company Overview