This role serves as the functional and operational owner of Oracle Risk Management Cloud (RMC) within the Enterprise Systems organization, supporting the execution and expansion of controls across User Access Review (UAR), Segregation of Duties (SoD), and Advanced Financial Controls (AFC). The ideal candidate brings a combination of Oracle Cloud functional knowledge, a strong understanding of internal controls, and the ability to work cross-functionally with IT, Finance, and Compliance stakeholders to drive effective platform utilization.
What You Will Do
- Serve as the functional owner and primary point of contact for Oracle RMC, managing platform configuration, role assignments, and system administration activities
- Administer and maintain UAR and SoD control configurations, including rule sets, access paths, and remediation workflows
- Lead the functional buildout and rollout of Advanced Financial Controls (AFC), working with Finance and IT stakeholders to configure control objectives, define risk conditions, and validate results
- Assess and prioritize opportunities to expand RMC adoption across additional control domains, documenting use cases and presenting recommendations to leadership
- Partner with internal audit to ensure controls configured in RMC align with SOX control objectives and audit requirements; support evidence collection and audit walkthroughs as needed
- Maintain control documentation, configuration change logs, and platform governance records in accordance with change management and SOX requirements
- Coordinate with Oracle Cloud functional teams (ERP, EPM, and related modules) to ensure role design, security model changes, and integration dependencies are reflected accurately in RMC
- Monitor control exception queues, work with process owners to drive timely remediation, and track outstanding items through resolution
- Support user training and enablement for process owners and control performers interacting with RMC workflows
- Stay current on Oracle RMC product updates, patches, and roadmap capabilities; evaluate applicability to the environment and communicate relevant changes to stakeholders
What You Will Need
Oracle Risk Management Cloud (RMC)
UAR & SoD Configuration
Advanced Financial Controls (AFC)
Oracle Cloud ERP Security Model
Role-Based Access Control
SOX IT General Controls
Access Governance
Compliance Documentation
- Bachelor’s degree in Information Systems, Accounting, Business Administration, or a related field; or equivalent experience with relevant certifications
- Minimum 3 years of hands-on experience with Oracle RMC or a comparable GRC platform, with demonstrated responsibility for platform configuration and administration
- Working knowledge of Oracle Cloud ERP security model, role-based access control, and segregation of duties concepts
- Familiarity with SOX IT general controls and the relationship between access governance controls and financial statement assertions
- Strong analytical and problem-solving skills with the ability to translate business and compliance requirements into platform configurations
- Excellent communication and documentation skills; ability to work effectively with technical and non-technical stakeholders
- Ability to manage multiple priorities independently in a dynamic, compliance-focused environment
? Preferred Skills
- Direct experience with Oracle RMC Advanced Financial Controls (AFC), including control condition configuration and transaction monitoring
- Experience supporting external audit engagements, including preparation of evidence packages related to UAR, SoD, and AFC controls
- Familiarity with Oracle Integration Cloud (OIC) or other middleware platforms as they relate to data flows into RMC
- Certification in Oracle Cloud (any functional track), CISA, CISM, or a related credential
- Experience in a publicly traded company with formal SOX compliance obligations