Manager, Application Security & SOX IT

Paramount is seeking an experienced manager to lead application security architecture and Sarbanes-Oxley (SOX) IT controls for Oracle environments. This role will serve as a subject matter expert (SME) for Oracle Fusion and Oracle EPM security, with audit support focused on segregation of duties, user access governance, risk mitigation, and evidence readiness across key platforms.

Role Overview

The Manager, Application Security & SOX IT will design, implement, and maintain Oracle Fusion and Oracle EPM security architecture. The position also provides SME guidance for application security and SOX compliance, including IT General Controls (ITGCs) and internal security policy alignment across Oracle Fusion ERP/Procurement/HCM, Oracle EPM, and Oracle Integration Cloud (OIC).

Key Responsibilities

• Create custom job roles and duty roles, and keep data security policies current in Oracle Fusion (ERP, Procurement, HCM), Oracle EPM, and FDI environments.
• Use Oracle IAM capabilities to support user provisioning, de-provisioning, and identity lifecycle management.
• Define and govern security roles, privileges, and access controls within Oracle Integration Cloud (OIC).
• Oversee user access reviews and certification campaigns; support opportunities to use Oracle Access Governance for automated provisioning and analytics.
• Ensure all Oracle environments meet SOX compliance, ITGCs, and internal security policy requirements.
• Implement, configure, and manage Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls) to continuously monitor and uphold segregation of duties (SoD).
• Act as the primary contact for internal and external auditors by providing reports, evidence, and system walkthroughs.
• Identify security vulnerabilities and potential SoD conflicts, then design and execute remediation plans.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Accounting Information Systems, or a related field.
• 5+ years of experience specializing in Oracle Application Security and IT Audit/Compliance.
• Strong understanding of SOX compliance, the COSO framework, and IT General Controls (ITGC).
• Proven experience designing and maintaining complex security roles across Oracle Fusion ERP, Procurement, and HCM.
• Hands-on experience managing security matrices and user access in Oracle Enterprise Performance Management.
• Solid knowledge and deep hands-on experience with Oracle Identity and Access Management frameworks.
• Direct implementation experience with Oracle Fusion Risk Management Cloud for segregation of duties and transaction monitoring (AAC/AFC).
• Clear comprehension of Oracle Integration Cloud (OIC) roles, privileges, and integration security.
• Hands-on expertise or certification in Oracle Access Governance.
• Relevant professional certifications such as CISA, CRISC, CISSP, or Oracle Certified Security Specialist.
• Strong communication skills with the ability to explain complex technical security concepts in business-friendly terms for compliance requirements.
• Solid analytical and problem-solving skills with high attention to detail.
• Ability to collaborate effectively with cross-functional teams, including Finance, HR, IT, and Internal Audit.

Relevant Technologies

• Oracle Fusion
• Oracle EPM
• Oracle Integration Cloud (OIC)
• Oracle Identity and Access Management (IAM)
• Oracle Access Governance
• Oracle Fusion Risk Management Cloud (Advanced Access Controls and Advanced Financial Controls)
• Oracle Fusion Risk Management Cloud (AAC/AFC)
• COSO
• IT General Controls (ITGC)
• SOX (Sarbanes-Oxley)

Location and Work Setting

New York, NY, US (onsite)

Compensation

• Salary: USD 124,000 - 186,000 per year
• Hiring Salary Range: $124,000.00 - 186,000.00

Benefits

• Medical, dental, vision
• 401(k) plan
• Life insurance coverage
• Disability benefits
• Tuition assistance program
• PTO or, if applicable, as otherwise dictated by the appropriate Collective Bargaining Agreement
• Bonus eligible