Application Security & Access Control Operations Lead

Bloomberg’s Finance Application Security & Access Control team focuses on governing who can access the Finance application landscape and ensuring permissions are appropriate, timely, and aligned with regulatory expectations. In this onsite New York role, you will lead application security and access control operations across SAP, Oracle EPM, and cloud-based Finance applications, shaping governance practices that support audit readiness.

As the Application Security & Access Control Operations Lead, you will drive access management governance, provisioning lifecycle management, and risk controls, partnering closely with Finance, Technology, Risk, and Audit to strengthen the control environment across the organization.

Key Responsibilities

• Drive the technology roadmap for access governance and provisioning by evaluating new tools and capabilities to improve security, compliance, and operational efficiency
• Govern user provisioning and lifecycle management processes across Finance applications
• Lead access governance activities including user access reviews, role recertifications, and privileged access reviews
• Manage Segregation of Duties (SoD) risks, mitigation controls, and remediation efforts
• Govern Firefighter/Emergency Access Management processes and monitoring
• Oversee privileged and administrative access monitoring across cloud and on-prem applications
• Partner with Finance, Technology, Risk, and Audit teams to maintain a strong and audit-ready control environment
• Drive continuous improvement of security and access control standards across the Finance landscape

Required Qualifications

• 10+ years of experience in IAM, Application Security, Access Governance, or ERP Security
• Strong experience with SAP and/or Oracle security models
• Hands-on experience with SAP GRC Access Control, including SoD analysis, access requests, and emergency access management
• Expertise in RBAC, role provisioning, user access reviews, and recertification processes
• Experience implementing and governing cloud application provisioning frameworks
• Experience supporting SOX compliance, audit activities, and access-related controls
• Strong analytical and risk assessment skills with the ability to identify and remediate control gaps

Technologies

• SAP
• Oracle EPM
• SAP GRC Access Control
• RBAC
• SoD
• SOX

Team Context

The Finance Application Security & Access Control team is responsible for governing user access across the Finance application landscape, ensuring the right users have the right access at the right time. The team manages provisioning, access reviews, SoD, privileged access, and compliance controls to help protect financial data and support regulatory requirements.

Nice to Have Skills

• Experience with Pathlock, Saviynt, or similar IAM/GRC platforms
• Experience supporting SAP BDC security and access controls
• Exposure to multi-platform access governance across SAP, Oracle, and SaaS applications
• Familiarity with privileged access management and continuous control monitoring solutions
• Experience in Project Management

Benefits

• Merit increases
• Incentive compensation (exempt roles only)
• Paid holidays
• Paid time off
• Medical, dental, and vision
• Short and long term disability benefits
• 401(k) +match
• Life insurance
• Various wellness programs

Compensation and Location

• Location: New York, NY (onsite)
• Salary: USD 200,000 - 240,000 per year
• Additional compensation: Benefits + Bonus

Accommodations

Bloomberg provides reasonable adjustment/accommodation to individuals with disabilities. To request an adjustment/accommodation to apply for a job, please email [email protected], [email protected], or [email protected] (based on region).

Equal Opportunity

Bloomberg is an equal opportunity employer and prohibits discrimination in employment. It is Bloomberg’s policy to provide equal opportunity and access for all persons, committed to attracting, retaining, developing, and promoting the most qualified individuals without regard to Protected Characteristic. Bloomberg prohibits treating applicants or employees less favorably in connection with the terms and conditions of employment, in all phases of the employment process, because of one or more Protected Characteristics.