Application Security & Access Control Operations Lead - Finance & Administration

As Finance Application Security & Access Control Lead, you drive access governance across SAP, Oracle EPM, and cloud finance apps to strengthen controls and compliance. You'll steward provisioning, reviews, and SoD, while modernizing the security and provisioning landscape. You work with Finance, Technology, Risk, and Audit to maintain an audit-ready control environment in a fast-paced, collaborative setting. This role offers impact in shaping secure, efficient access governance at scale.

• comprehensive benefits plan
• 401(k) with match
• medical/dental/vision
• paid holidays and time off
• short and long-term disability benefits
• bonus opportunities

• Govern user provisioning and lifecycle management across Finance applications
• Lead access governance activities including reviews, recertifications, and privileged access reviews
• Manage SoD risks, mitigation, and remediation
• Govern Firefighter/Emergency Access Management processes and monitoring
• Oversee privileged and administrative access monitoring across cloud and on-prem apps
• Partner with Finance, Technology, Risk, and Audit to maintain a strong control environment
• Drive continuous improvement of security and access control standards across the Finance landscape
• Drive the technology roadmap for access governance and provisioning, evaluating new tools and capabilities

• 10+ years of experience in IAM, Application Security, Access Governance, or ERP Security
• Strong experience with SAP and/or Oracle security models
• Hands-on experience with SAP GRC Access Control (SoD, access requests, emergency access)
• Expertise in RBAC, role provisioning, access reviews, and recertification processes
• Experience implementing and governing cloud application provisioning frameworks
• Experience supporting SOX compliance, audits, and access-related controls
• Strong analytical and risk assessment skills with ability to remediate control gaps

• Stakeholder management
• Influencing across business and technology teams
• Continuous improvement mindset
• SAP GRC Access Control
• RBAC and role provisioning
• SoD analysis and recertification