Oracle security

Role & responsibilities

Oracle ERP Security Questionnaire:

• Q: In Oracle Cloud ERP, What are function security vs data security? Give examples of each

A: Function security controls access to pages/actions (e.g., Create Invoice”); data security controls record access (e.g., only invoices for BU=US).

• Q: When would you clone a role vs create a custom role from scratch?

A: Clone when seeded is mostly correct and you need small changes; avoid “from scratch” because it’s harder to maintain and upgrade.

• Q: How does OTBI report security work differently compare to BIP report security?

A: For OTBI, roles grant access to subject areas; data returned is constrained by the same application data security scoping (BU/ledger etc.). Whereas for BI, we secure catalog folders/reports by roles, restrict data model editing, and limit scheduling rights.

• Q: Explain the workflow of advanced access controls (AAC) and advanced financial controls (AFC)

A: Controls are deployed and run. Incidents are generated and assigned to investigators. Investigators will take action on incidents.

KEYWORDS to include in your search string for profiles and preferred profiles:

Oracle ERP/RMC Security:

• Key words:

• Oracle security

• Job roles/Duty roles

• OTBI

• BIP

• RMC

• Risk Management cloud

• AAC

• AFC

• FRC

Role Requirement: There are two openings/positions to be filled for the Oracle ERP/RMC Security – Senior Consultant/Consultant role.

Oracle SaaS ERP/RMC Qualifications

Must Have Skills/Project Experience/Certifications:

• 5–7 years supporting Oracle Cloud ERP security in an operate / production support model, with deep expertise in FSCM and HCM modules including basic knowledge on security assessments, security design.
• Demonstrated understanding of end-to-end business process flows, cloud security risk, Oracle application security, and risk management cloud within day-to-day operations.
• Hands-on experience in the Oracle Cloud Security Console: operating and maintaining custom roles and performing ongoing user access administration (add/modify users, add/remove roles, assign data security context, manage profiles, etc.).
• Experience operating and maintaining data roles, custom security profiles, Area of Responsibility (AOR) assignments, HCM Data Loader (HDL) activities.
• Hands-on experience in Quarterly update impact analysis, regression support, Periodic user access reviews/audits, Segregation of Duties (SOD) analysis, and mitigation support.
• Experience securing Oracle BI / OTBI artifacts (reports, data models, subject areas, analyses) and supporting ongoing authorization changes.
• Experience working in a ticket-based operate model with SLAs (intake, triage, incident/problem management, root-cause analysis, and recurring issue reduction) and coordinating with development, functional, business, and information security/risk stakeholders.
• Proven ability to run and sustain controls: identify key risks and controls, support SOX readiness/audits, optimize controls, and help operate controls within Oracle Risk Management Cloud (RMC)
• Strong written/verbal communication, ability to produce clear runbooks/SOPs, and strong organization/project management skills (planning access releases, coordinating approvals, managing cutovers for security changes).

Good to Have Skills / Experience / Certifications

• Experience with Oracle GRC / RMC design or operations across Advanced Access Controls (AAC), Advanced Financial Controls (AFC), and Financial Reporting Compliance (FRC).
• Implementation experience preferred to enable effective run + enhancement support
• Broader Oracle Cloud exposure across ERP/HCM modules (helpful for faster troubleshooting and process-aware security support).
• Prior consulting experience (including Big 4) preferred.
• Automation experience (e.g., scripting or tooling) to streamline recurring operate tasks (e.g., access review evidence, role audit extracts, regression support).
• Troubleshooting/analysis skills using PL/SQL (read/diagnose, validate results) for issue investigation and support.

Rate Card :-