[Remote] Oracle Security Analyst

Note: The job is a remote job and is open to candidates in USA. Cordea Consulting is seeking an experienced Oracle Security Analyst to secure enterprise Oracle Cloud environments. The role focuses on Oracle Fusion Security, Oracle Access Governance, identity and access management, access governance, RBAC and ABAC, SoD enforcement, compliance audits, and threat monitoring.

Responsibilities

• Oversee role administration, data security policies, duty roles, and privilege mappings across Oracle Fusion Cloud Applications using Oracle Access Governance (OAG)
• Manage access request workflows, access certifications, and micro-certifications to ensure compliance with company policies
• Administer user lifecycle workflows (Joiners, Movers, Leavers / JML), privileged access management (PAM), multi-factor authentication (MFA), and automated provisioning within Oracle IAM and OCI IAM environments
• Configure role-based access controls (RBAC) and attribute-based access controls (ABAC)
• Lead periodic access recertification reviews, entitlement audits, and policy enforcement via Oracle Access Governance to enforce least privilege
• Perform audit-trail analysis across Oracle Fusion modules to detect unauthorized configuration changes or access anomalies
• Identify, analyze, and resolve SoD conflicts, custom role risks, and compliance exceptions
• Support internal/external auditors during SOX ITGC, NIST CSF, PCI-DSS, and HIPAA regulatory compliance assessments
• Review Oracle Cloud Guard, Audit Logs, and SIEM feeds for unauthorized access attempts, anomaly detection, and elevated privilege misuse
• Collaborate with incident response teams to investigate and remediate access-related alerts

Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent work experience
• 3+ years of direct experience in Information Security, Identity & Access Management (IAM), or Governance, Risk, and Compliance (GRC)
• Strong expertise in Oracle Fusion Applications (ERP/HCM) , Oracle Access Governance (OAG) , and Oracle Identity Governance / Identity Manager (OIG/OIM / OCI IAM)
• Working knowledge of NIST CSF, NIST 800-53, SOX ITGCs, CIS Controls, and ISO 27001
• Proficient in SQL queries for log/user extract reporting, RBAC customization, Jira ticketing, and SIEM tool integration (e.g., Splunk)
• Oracle Cloud Infrastructure Security Professional / Oracle Identity & Access Management Certified
• CompTIA Security+, CySA+, or Security X (CASP+)
• Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM)
• (ISC)² CISSP or Certified Cloud Security Professional (CCSP)

Company Overview