Oracle Security & Authorisations - Consultant

About the role

In Oracle HCM, a security design error does not just create an access support ticket - it creates a data breach, a compliance gap, or a go-live delay. If you understand the role inheritance hierarchy deeply enough to design a multi-country security model without creating orphaned data roles, this is your workstream. ABOUT ROLLING ARRAYS Rolling Arrays is a private equity-backed, award-winning HR Tech consulting firm - Asia Pacific's premium partner for enterprise HR digital transformation. Headquartered in Singapore and with offices across India, Malaysia, Australia, and Hong Kong, we have delivered more than 200 HR Transformation projects since our founding in 2009, and were recognised as one of Singapore's Top 100 fastest-growing companies in 2025. We specialise in SAP SuccessFactors, Oracle HCM, and Workday across the full delivery spectrum: HR process design and consulting (ALIGN), technology implementation (AUTOMATE), change management and adoption (ADOPT), and managed support services (AMS). P OSITION SUMMARY We are seeking a Consultant specialising in Oracle HCM Cloud Application Security and Authorisations. You will design, configure, and test the RBAC framework across Oracle HCM Cloud modules, ensuring that clients' HR data is protected by the principle of least privilege and that the security model is sustainable, auditable, and upgrade-safe. WHAT YOU WILL DO Design the RBAC framework - deciding how many custom roles are needed, whether to deep-copy or shallow-copy predefined Oracle roles, whether to use fixed data roles or the Area of Responsibility pattern for HR specialists, and what naming convention will allow security administrators to maintain the system after go-live Configure HCM Data Roles - combining job roles with security profiles across every dimension: person, organisation, position, payroll, Legislative Data Group, and document type Lead client security design workshops - translating access matrix requirements from HR, IT, and Finance into Oracle's security model, and navigating the reality that requirements from those three groups rarely align on first pass Design and execute the security test strategy - building positive and negative test cases and producing the documented test evidence that an auditor will ask for at go-live Own the Segregation of Duties analysis - identifying conflicting duty combinations that create audit risk, designing role structures that prevent access conflicts, and producing the SoD compliance matrix for client sign-off Configure role provisioning rules - automatic provisioning based on HR data attributes versus manual assignment, and the provisioning lifecycle for workers, contingent workers, and system users WHY ROLLING ARRAYS Security at Rolling Arrays is a first-class delivery workstream, not an afterthought assigned to a junior consultant in the final four weeks. You will work on multi-module Oracle HCM programmes across Singapore, Malaysia, Australia, and India - each with different legislative data privacy requirements - and build genuine expertise in Oracle's most complex and consequential configuration domain. OUR CULTURE CODE Six values define how we operate every day at Rolling Arrays: Thinking Smart - spot patterns, chase smarter solutions, and illuminate the path to greater productivity Never Stop Learning - refine and elevate skills constantly; explore the world with a curiosity lens Being Nice to Everyone - treat everyone with genuine warmth and respect, regardless of seniority Be Super Patient with Customers - exercise patience and proactivity in every client interaction Help Your Teammates - share the load, lighten the stress, nurture a truly collaborative team Acknowledge Your Mistakes - embrace mistakes as steppingstones; grow from each one WHAT WE'RE LOOKING FOR 2-4 years of Oracle HCM Cloud Security configuration experience on live implementation projects - has personally designed and built data roles and security profiles, not observed another consultant do it Demonstrated data role design - has combined job roles with security profiles and validated the resulting data access scope through positive and negative testing Experience leading or materially contributing to the security workstream for at least one end-to-end Oracle Cloud implementation through to go-live Ability to translate a client access matrix into Oracle's security model and explain the design choices in business language to HR leadership SoD conflict identification and documentation experience PREFERRED QUALIFICATIONS Oracle Fusion Cloud Applications HCM Process Essentials certified - the foundational HCM credential; at Consultant level this is the expected starting point for certification Oracle Global Human Resources Cloud Implementation Professional - working toward this certification demonstrates commitment to the domain; security is inseparable from Core HR module depth Oracle Risk Management Cloud (Advanced Access Controls) certification or hands-on experience

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at Rolling Arrays - Consulting? Share your experience