Oracle Security & Authorisations - Consultant at Rolling Arrays
Mumbai, maharashtra, India -
Full Time


Start Date

Immediate

Expiry Date

18 Aug, 26

Salary

0.0

Posted On

20 May, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Oracle HCM Cloud Security, RBAC Framework, Data Role Design, Segregation of Duties, Security Profile Configuration, Oracle IDCS, Oracle Risk Management Cloud, Security Testing, Audit Documentation, Business Translation, Oracle Fusion Cloud, Access Control

Industry

IT Services and IT Consulting

Description
In Oracle HCM, a security design error does not just create an access support ticket — it creates a data breach, a compliance gap, or a go-live delay. If you understand the role inheritance hierarchy deeply enough to design a multi-country security model without creating orphaned data roles, this is your workstream. ABOUT ROLLING ARRAYS Rolling Arrays is a private equity-backed, award-winning HR Tech consulting firm — Asia Pacific's premium partner for enterprise HR digital transformation. Headquartered in Singapore and with offices across India, Malaysia, Australia, and Hong Kong, we have delivered more than 200 HR Transformation projects since our founding in 2009, and were recognised as one of Singapore's Top 100 fastest-growing companies in 2025. We specialise in SAP SuccessFactors, Oracle HCM, and Workday across the full delivery spectrum: HR process design and consulting (ALIGN), technology implementation (AUTOMATE), change management and adoption (ADOPT), and managed support services (AMS). POSITION SUMMARY We are seeking a Consultant specialising in Oracle HCM Cloud Application Security and Authorisations. You will design, configure, and test the RBAC framework across Oracle HCM Cloud modules, ensuring that clients' HR data is protected by the principle of least privilege and that the security model is sustainable, auditable, and upgrade-safe. WHAT YOU WILL DO Design the RBAC framework — deciding how many custom roles are needed, whether to deep-copy or shallow-copy predefined Oracle roles, whether to use fixed data roles or the Area of Responsibility pattern for HR specialists, and what naming convention will allow security administrators to maintain the system after go-live Configure HCM Data Roles — combining job roles with security profiles across every dimension: person, organisation, position, payroll, Legislative Data Group, and document type Lead client security design workshops — translating access matrix requirements from HR, IT, and Finance into Oracle's security model, and navigating the reality that requirements from those three groups rarely align on first pass Design and execute the security test strategy — building positive and negative test cases and producing the documented test evidence that an auditor will ask for at go-live Own the Segregation of Duties analysis — identifying conflicting duty combinations that create audit risk, designing role structures that prevent access conflicts, and producing the SoD compliance matrix for client sign-off Configure role provisioning rules — automatic provisioning based on HR data attributes versus manual assignment, and the provisioning lifecycle for workers, contingent workers, and system users WHY ROLLING ARRAYS Security at Rolling Arrays is a first-class delivery workstream, not an afterthought assigned to a junior consultant in the final four weeks. You will work on multi-module Oracle HCM programmes across Singapore, Malaysia, Australia, and India — each with different legislative data privacy requirements — and build genuine expertise in Oracle's most complex and consequential configuration domain. OUR CULTURE CODE Six values define how we operate every day at Rolling Arrays: Thinking Smart — spot patterns, chase smarter solutions, and illuminate the path to greater productivity Never Stop Learning — refine and elevate skills constantly; explore the world with a curiosity lens Being Nice to Everyone — treat everyone with genuine warmth and respect, regardless of seniority Be Super Patient with Customers — exercise patience and proactivity in every client interaction Help Your Teammates — share the load, lighten the stress, nurture a truly collaborative team Acknowledge Your Mistakes — embrace mistakes as steppingstones; grow from each one WHAT WE'RE LOOKING FOR 2–4 years of Oracle HCM Cloud Security configuration experience on live implementation projects — has personally designed and built data roles and security profiles, not observed another consultant do it Demonstrated data role design — has combined job roles with security profiles and validated the resulting data access scope through positive and negative testing Experience leading or materially contributing to the security workstream for at least one end-to-end Oracle Cloud implementation through to go-live Ability to translate a client access matrix into Oracle's security model and explain the design choices in business language to HR leadership SoD conflict identification and documentation experience PREFERRED QUALIFICATIONS Oracle Fusion Cloud Applications HCM Process Essentials certified — the foundational HCM credential; at Consultant level this is the expected starting point for certification Oracle Global Human Resources Cloud Implementation Professional — working toward this certification demonstrates commitment to the domain; security is inseparable from Core HR module depth Oracle Risk Management Cloud (Advanced Access Controls) certification or hands-on experience — for systematic SoD risk analysis and continuous monitoring Oracle IDCS (Identity Cloud Service) or Oracle Access Governance exposure — for enterprise identity lifecycle management alongside HCM security BUSINESS & CONSULTING SKILLS Audit-grade documentation — produces security test evidence and SoD matrices that withstand scrutiny from compliance and internal audit teams Business translation — explains role inheritance, data security, and access control in language that HR Directors and IT governance teams can act on Structured problem-solving — diagnoses security issues methodically rather than through trial and error Cross-team collaboration — works effectively with HR, IT, and Finance workstreams whose requirements rarely align on first pass Attention to detail — a missed security configuration creates a breach, not just a ticket; precision is non-negotiable Professional client interaction — represents RAC credibly in client-facing sessions at working level CAREER PROGRESSION Consultant → Senior Consultant → Lead Consultant → Solution Architect → Practice Lead
Responsibilities
Design and configure the RBAC framework and HCM data roles to ensure secure, auditable access to HR data. Lead security design workshops and manage the Segregation of Duties analysis and security testing strategy.
Loading...