Role & responsibilities

Oracle ERP Security Questionnaire:

- Q: In Oracle Cloud ERP, What are function security vs data security? Give examples of each

A: Function security controls access to pages/actions (e.g., Create Invoice”); data security controls record access (e.g., only invoices for BU=US).

- Q: When would you clone a role vs create a custom role from scratch?

A: Clone when seeded is mostly correct and you need small changes; avoid “from scratch” because it’s harder to maintain and upgrade.

- Q: How does OTBI report security work differently compare to BIP report security?

A: For OTBI, roles grant access to subject areas; data returned is constrained by the same application data security scoping (BU/ledger etc.). Whereas for BI, we secure catalog folders/reports by roles, restrict data model editing, and limit scheduling rights.

- Q: Explain the workflow of advanced access controls (AAC) and advanced financial controls (AFC)

A: Controls are deployed and run. Incidents are generated and assigned to investigators. Investigators will take action on incidents.

KEYWORDS to include in your search string for profiles and preferred profiles:

Oracle ERP/RMC Security:

- Key words:
- Oracle security
- Job roles/Duty roles
- OTBI
- BIP
- RMC
- Risk Management cloud
- AAC
- AFC
- FRC

Role Requirement: There are two openings/positions to be filled for the Oracle ERP/RMC Security – Senior Consultant/Consultant role.

Oracle SaaS ERP/RMC Qualifications

Must Have Skills/Project Experience/Certifications:

- 5–7 years supporting Oracle Cloud ERP security in an operate / production support model, with deep expertise in FSCM and HCM modules including basic knowledge on security assessments, security design.
- Demonstrated understanding of end-to-end business process flows, cloud security risk, Oracle application security, and risk management cloud within day-to-day operations.
- Hands-on experience in the Oracle Cloud Security Console:



operating and maintaining custom roles and performing ongoing user access administration (add/modify users, add/remove roles, assign data security context, manage profiles, etc.).
- Experience operating and maintaining data roles, custom security profiles, Area of Responsibility (AOR) assignments, HCM Data Loader (HDL) activities.
- Hands-on experience in Quarterly update impact analysis, regression support, Periodic user access reviews/audits, Segregation of Duties (SOD) analysis, and mitigation support.
- Experience securing Oracle BI / OTBI artifacts (reports, data models, subject areas, analyses) and supporting ongoing authorization changes.
- Experience working in a ticket-based operate model with SLAs (intake, triage, incident/problem management, root-cause analysis, and recurring issue reduction) and coordinating with development, functional, business, and information security/risk stakeholders.
- Proven ability to run and sustain controls: identify key risks and controls, support SOX readiness/audits, optimize controls, and help operate controls within Oracle Risk Management Cloud (RMC)
- Strong written/verbal communication, ability to produce transparent runbooks/SOPs, and strong organization/project management skills (planning access releases, coordinating approvals, managing cutovers for security changes).

Good to Have Skills / Experience / Certifications

- Experience with Oracle GRC / RMC design or operations across Advanced Access Controls (AAC), Advanced Financial Controls (AFC), and Financial Reporting Compliance (FRC).
- Implementation experience preferred to enable effective run + enhancement support
- Broader Oracle Cloud exposure across ERP/HCM modules (helpful for faster troubleshooting and process-aware security support).
- Prior consulting experience (including Big 4) preferred.
- Automation experience (e.g., scripting or tooling) to streamline recurring operate tasks (e.g., access review evidence, role audit extracts, regression support).
- Troubleshooting/analysis skills using PL/SQL (read/diagnose, validate results) for issue investigation and support.

Rate Card :-

📌 Oracle security (Hyderabad)
🏢 Cloudxtreme
📍 Hyderabad