Oracle ERP/EPM Controls/Security Consultant

Duration: Initial 12-month contractLocation: Predominantly remoteWorking arrangement: Remote, with occasional meetings as required OverviewWe are looking for an experienced Oracle Controls professional to provide independent operational oversight across Oracle Fusion, EPM and related Oracle SaaS environments.This is not a development or integration role. The successful candidate will work alongside existing Oracle technical teams, providing oversight of day-to-day controls, access management, change management, deployment activity and audit readiness. The ideal candidate will have a good understanding of how Oracle environments are configured and supported, together with practical experience of SOX controls and audit requirements. You do not need to be a hands-on Oracle developer, but you should understand Oracle configurations, SaaS limitations, change processes and what good technical governance looks like.Experience with Oracle EPM would be highly advantageous. Key ResponsibilitiesProvide independent oversight of Oracle Fusion and EPM operational controls.Review and oversee user access requests, approvals and access changes.Support segregation of duties (SoD) reviews and ensure appropriate controls are maintained.Independently review developer and administrator access and activity.Review Oracle configuration and system changes to determine whether changes were appropriately authorised and expected.Review Requests for Change (RFCs) and confirm appropriate approvals, testing and supporting evidence are in place.Work with development, administration and deployment teams to ensure changes follow the appropriate governance processes.Coordinate with business stakeholders and deployment teams around planned changes.Provide regular weekly/monthly reviews of system changes, identifying approved changes and escalating anything requiring further investigation.Support SOX audit preparation, evidence gathering and ongoing audit activities.Maintain and review evidence relating to testing, approvals, deployments and access controls.Help finance and system owners understand the technical implications and control considerations of proposed changes.Act as a bridge between business stakeholders, Oracle technical teams and audit/control functions.Provide guidance on Oracle SaaS capabilities, configurations and limitations.Support ongoing improvements and additional capabilities within the existing Oracle EPM environment.Contribute to the ongoing development of the organisation's Oracle control framework and operational processes.Required ExperienceProven experience working with Oracle environments, ideally Oracle Fusion and/or Oracle EPM.Strong understanding of SOX controls and SOX audit requirements – this is essential.Previous experience in Oracle support, administration, implementation or operational governance.Good understanding of Oracle SaaS environments, including what can and cannot be configured or changed.Experience with access management and user access reviews.Strong understanding of change management, including RFCs, approvals, testing and deployment controls.Experience reviewing technical changes and associated evidence.Understanding of segregation of duties and IT controls.Comfortable providing independent oversight of developers and administrators.Strong communication skills, with the ability to work effectively with technical and non-technical stakeholders.Desirable ExperienceOracle EPM / Enterprise Performance Management experience.Oracle EPM Cloud / Fusion EPM.Oracle FDI (Fusion Data Intelligence).IDCS / Oracle Identity and Access Management.Experience supporting finance systems.Experience working within a regulated or audit-heavy environment.Previous involvement in external or internal SOX audits.Experience operating as a controls lead, controls engineer, IT controls manager or similar.Ideal ProfileThe ideal candidate is not necessarily the most technical Oracle developer.Instead, we are looking for someone who understands Oracle well enough to ask the right questions and identify what is relevant from a controls perspective.You should be able to look at a proposed configuration or system change and understand:What has actually changed?Could this change have been made by the system automatically, or was it intentional?Was the change properly requested and approved?Has it been appropriately tested?Is there sufficient evidence?Does the person making the change have the appropriate access?Are there any segregation-of-duties concerns?Is the change consistent with Oracle's SaaS capabilities and limitations?You will provide independent oversight rather than hands-on development, ensuring that existing development and administration activity is properly controlled, documented and audit-ready. Role FocusThe role will sit across three key areas:Oracle / EPM KnowledgeUnderstanding of Oracle Fusion, EPM and SaaS environments.Ability to understand configurations, capabilities and limitations.Sufficient technical knowledge to challenge and assess proposed changes.Operational ControlsAccess reviews.Change reviews.Deployment governance.Testing and approval evidence.Developer and administrator oversight.Segregation of duties.SOX / AuditOngoing SOX control ownership and support.Audit evidence and reporting.Regular control reviews.Liaising with auditors and internal stakeholders.Ensuring Oracle activities remain audit-ready throughout the year.ContractThis is an initial 12-month engagement within an ongoing operational function. The requirement is not a short-term three-month project; the controls and SOX requirements are expected to remain an ongoing part of the Oracle environment.The position is predominantly remote and will work closely with Oracle technical teams, business stakeholders, finance system owners and deployment teams.