Oracle Fusion RMC Functional Lead

Oracle Fusion RMC Functional Lead

(AAC, AFC, SOD Governance & Continuous Controls Monitoring)

Ideal Seniority

• Senior Consultant

• Lead Consultant

• Solution Architect

• 8-12+ years total experience

• 4-6+ years Oracle Fusion Risk Management Cloud experience

Mission

Own the design, implementation, and ongoing management of:

• Oracle Advanced Access Controls (AAC)

• Oracle Advanced Financial Controls (AFC)

• Segregation of Duties (SOD)

• Sensitive Access Analysis

• Continuous Controls Monitoring (CCM)

• Audit and compliance reporting

The individual should act as the client''s:

• Risk & Compliance SME

• Oracle Controls Architect

• SOD Governance Lead

Required Functional Expertise

Oracle Fusion Risk Management Cloud (RMC)

Deep experience implementing and administering:

• AAC

• AFC

• Financial Reporting Compliance (FRC)

• Access Certification

• Controls Frameworks

Oracle documentation highlights AAC and AFC as the core components used to:

• Monitor segregation of duties

• Monitor sensitive access

• Monitor transactions

• Detect policy violations

• Support continuous compliance monitoring. , 

Advanced Access Controls (AAC)

Must have experience with:

SOD Design

• SOD matrices

• Toxic combinations

• Role rationalization

• Access governance

Sensitive Access Monitoring

• Super-user monitoring

• Privileged access reviews

• Emergency access controls

Control Development

• Custom access models

• Global conditions

• Path conditions

• Control deployment

Incident Management

• Violation analysis

• False positive elimination

• Remediation workflows

• Compensating controls

Advanced Financial Controls (AFC)

Must have implemented:

Transaction Monitoring Controls

Examples:

• Duplicate payments

• Supplier fraud scenarios

• Manual journal monitoring

• Payment overrides

• Procurement fraud controls

Configuration Monitoring

Examples:

• Supplier master changes

• Payment setup changes

• Approval hierarchy modifications

• Security configuration changes

Exception Management

• Incident lifecycle

• Workflow routing

• Root cause analysis

• Audit evidence generation

Governance & Compliance Knowledge

Strong experience with:

• SOX

• COSO

• Internal Controls over Financial Reporting (ICFR)

• Internal Audit

• Compliance testing

• Risk assessment

Preferred:

• CISA

• CRISC

• CPA

• CIA

Key Deliverables

• Enterprise SOD Matrix

• Role Conflict Framework

• Risk Register

• AAC Controls Library

• AFC Controls Library

• Continuous Monitoring Dashboard

• Audit Reports

• Compliance Metrics

What Great Looks Like

This person can walk into a workshop and answer:

• Is this a true SOD conflict?

• What is the business risk?

• How should the control be configured?

• What compensating controls are acceptable?

• How should auditors test the control?