Application Manager - Controls

Job description

• Meta is seeking an experienced, process-oriented, and technically hands-on Application Manager to lead and manage SOX and Security compliance across the Enterprise Products (EP) organization. This role is crucial for ensuring that compliance standards and processes are effectively built, monitored, and enforced across the organization. The Application Manager will work closely with over 200 Enterprise Products across various Team Groups, enabling them to execute their product-build roadmaps in a compliant manner. This includes evaluating, providing guidance, and managing organization-level compliance exercises related to SOX and security compliance, as well as fostering good working relationships with both internal and external audit teams.
• Application Manager - Controls Responsibilities
• Identify and assess SOX and security compliance risks and advise controls to stakeholders.
• Evaluate upcoming releases and work with engineering and product leads, guiding them to ensure building compliant products.
• Manage and direct the work streams related to IT SOX compliance and application controls.
• Provide technical support in the assessment, design, and implementation of ITGC and application control requirements.
• Design and implement controls for Oracle Fusion application leveraging Oracle Risk Management Cloud (RMC)
• Collaborate and build long-term relationships with key stakeholders in a fast-paced and matrixed work environment.
• Promote thought leadership for new ideas and new ways of executing compliance initiatives across Enterprise products and infrastructure, driving continuous improvements with the delivery of audit-compliant services.
• Stay current on industry trends and security events that impact the Meta and EP environment.
• Promote automation and data analytics-based audit testing, innovation around the execution of projects to drive continuous monitoring and auditing.
• Minimum Qualifications
• Previous Consulting or Big 4 experience
• Experience with Oracle Risk Management Cloud – Advanced Access Controls (AAC), Advanced Financial Controls (AFC) and Financial Reporting Controls (FRC)
• Experience with Oracle Cloud role design across functional (ERP, HCM, SCM and EPM)
• Certifications such as: CISSP, CISM or CISA is desired
• Knowledge of Oracle Cloud security design and implementation methodology
• Good understanding of Segregation of Duties (SOD) frameworks and personally identifiable information (PII)
• Knowledge of identifying key risks and controls, knowledge of Sarbanes Oxley (SOX) readiness, controls optimization, as well as configuration of controls around security, business process and within the Oracle Cloud RMC modules
• Knowledge of business process, controls optimization, user provisioning and security lifecycle maintenance
• Preferred Qualifications
• Good understating of Single Sign-on (SSO) and Multi-factored authentication (MFA)
• Knowledge/experience in identity access management tools and/or Oracle Identity Cloud Service (IDCS)
• Knowledge/experience in data protection tools and techniques
• Oracle Risk Management Cloud Certified Implementation Professional certification is desired
• Oracle Cloud Infrastructure Security Professional certification is desired