Manager, Application Security & SOX IT
Paramount46569 New York, NY, US, 10036 Hollywood, CA, US, 90028 New York, NY, US, 10036 Technology New York Full-Time On-Site #WeAreParamount on a mission to unleash the power of content… you in? We’ve got the brands, we’ve got the stars, we’ve got the power to achieve our mission to entertain the planet – now all we’re missing is… YOU! Becoming a part of Paramount means joining a team of passionate people who not only recognize the power of content but also enjoy a touch of fun and uniqueness. Together, we co-create moments that matter – both for our audiences and our employees – and aim to leave a positive mark on culture. Overview: We are seeking a highly skilled and proficient Manager, Application Security and Compliance to lead the design, implementation, and maintenance of our Oracle Fusion and Oracle EPM security architecture. In this role, you will serve as the Subject Matter Expert (SME) for application security and Sarbanes-Oxley (SOX) compliance across our enterprise systems. You will be in charge of ensuring strict Segregation of Duties (SoD), managing user access governance, and mitigating risk across Oracle Fusion (ERP, Procurement, and HCM), Oracle EPM, and Oracle Integration Cloud (OIC). The ideal candidate brings a blend of technical expertise in Oracle Identity and Access Management (IAM) and a deep knowledge of IT General Controls (ITGC) and compliance frameworks. Responsibilities: Security Architecture and Role Management Design and Maintenance: Create custom job roles and duty roles. Keep data security policies updated in Oracle Fusion (ERP, Procurement, HCM), Oracle EPM, and FDI environments. Identity Management: Leverage Oracle IAM to manage user provisioning, de-provisioning, and identity lifecycles. OIC Security: Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC). Access Governance: Oversee user access reviews and certification campaigns, with an opportunity to leverage Oracle Access Governance for automated provisioning and analytics. Compliance & Risk Management SOX Compliance: Ensure all Oracle environments strictly adhere to SOX compliance, ITGCs, and internal security policies. Risk Mitigation: Implement, configure, and manage Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls) to continuously monitor and uphold Segregation of Duties (SoD). Audit Support: Serve as the primary point of contact for internal and external auditors, providing necessary reports, evidence, and system walkthroughs. Remediation: Identify security vulnerabilities or SoD conflicts and proactively design and execute remediation plans. Basic Qualifications: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field. 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance. Strong knowledge of SOX compliance, COSO framework, and IT General Controls (ITGC). Oracle Fusion Expertise: Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM. Oracle EPM Security: Hands-on experience managing security matrices and user access within Oracle Enterprise Performance Management. Oracle IAM: Sound knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks. Risk Management Cloud: Direct implementation experience with Oracle Fusion Risk Management Cloud (AAC/AFC) for SoD and transaction monitoring. OIC Knowledge: Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security. Additional Qualifications: Hands-on expertise or certification in Oracle Access Governance. Relevant professional certifications (e.g., CISA, CRISC, CISSP, or Oracle Certified Security Specialist). Great communication skills. Ability to explain complex technical security concepts in simple terms fo…