Oracle Fusion ITGC Analyst

Oracle Fusion ITGC Analyst

Support Oracle Fusion Financials and ITGC processes in a global enterprise environment

Primary Responsibilities

• Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness.

• Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies.

• Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes.

• Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting.

• Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls.

• Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging.

• Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness.

• Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions.

• Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation.

• Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records.

• Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks.

• Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities.

• Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks.

• Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements.

Requirement

• Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function.

• Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.

• Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging.

• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.

• Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation.

• Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence.

• Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers.

• Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications.

• Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements.

• Strong analytical, project-management, communication, and stakeholder-influencing skills.

• Ability to work independently and coordinate compliance activities across global, cross-functional teams.

• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field.

• Equivalent combinations of education, training, professional certifications, and relevant experience may be considered.

• You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.

Mandatory Technical Skills

• CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification.

• Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.

• Experience in IT audit, technology risk, or controls advisory with a major accounting or professional-services firm.

• Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform.

• Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies.

• Experience with identity governance, role-based access, privileged-access management, service accounts, and joiner, mover, and leaver controls.

• Experience evaluating automated controls, system-generated reports, interfaces, data integrity, and information produced by the entity.

• Working knowledge of SQL, reporting tools, data analytics, or continuous-control monitoring.

• Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams.

• Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.

• Strong customer-service orientation with the ability to challenge ineffective practices and escalate unresolved compliance risks.