Sr. Manager, IT Security & Risk

Overview

Oceaneering’s Enterprise Applications organization enables secure, reliable, and compliant business operations through enterprise platforms, governance, and support. The Security & Controls function partners with business process owners, Internal Audit, external auditors, Cybersecurity, Compliance, and IT delivery teams to manage application security, access governance, segregation of duties, controls, and audit readiness across the ERP landscape.

Position Summary

The Senior Manager, Security & Controls leads the day-to-day delivery and strategic advancement of Security & Controls for Oracle Fusion Cloud ERP and Costpoint ERP. Reporting to the Sr. Director – Enterprise Applications, this role is accountable for application security, user access governance, segregation of duties, controls design and testing, compliance, audit support, service levels, staffing, reporting, and continuous improvement. The position will build and operate a sustainable, risk-based S&C capability that protects Oceaneering’s enterprise applications while enabling efficient business operations.

Duties and Responsibilities

Operational Leadership and Service Delivery

• Own end-to-end delivery of the Security & Controls function across Oracle Fusion Cloud ERP and Costpoint ERP, including provisioning, access reviews, controls testing, incident and request resolution, audit support, and reporting.

• Define, publish, monitor, and continuously improve service levels and performance measures for access requests, security incidents, controls execution, and audit support.

• Manage the operating model, capacity plan, staffing mix, budget, priorities, risks, and delivery commitments for the S&C team.

• Ensure documented procedures, runbooks, escalation paths, cross-training, and business continuity coverage are maintained for critical S&C services.

Application Security and Access Governance

• Set direction for application security architecture and governance across Oracle Fusion Cloud ERP and Costpoint ERP, including role design, least privilege, privileged access, and segregation-of-duties standards.

• Govern role catalogs, personas, job-to-role mappings, approval workflows, sensitive access, and periodic user access certifications.

• Own segregation-of-duties and sensitive-access rulesets, risk ratings, mitigating controls, exception processes, and periodic reviews.

• Direct security remediation and role redesign activities, including resolution of inherited, custom, and cross-application access conflicts.

• Partner with Identity and Access Management, Cybersecurity, infrastructure, integration, functional, and business teams to ensure consistent joiner, mover, and leaver controls.

Controls, Automation, and Continuous Improvement

• Lead automation of access requests, approvals, segregation-of-duties checks, access certifications, controls testing, monitoring, evidence generation, and reporting.

• Advance the function from periodic and manual controls toward continuous, evidence-generating controls where practical and risk appropriate.

• Maintain a prioritized S&C roadmap with measurable improvements in control effectiveness, cycle time, quality, coverage, and effort.

• Assess ERP releases, enhancements, integrations, and configuration changes for security and controls impacts before production deployment.

Compliance, Audit, and Risk Management

• Serve as the senior S&C point of contact for internal and external auditors for Oracle Fusion Cloud ERP and Costpoint ERP application security and controls.

• Coordinate control walkthroughs, evidence, testing support, issue responses, and remediation through closure.

• Ensure control evidence is complete, accurate, timely, traceable, and retained in accordance with applicable requirements.

• Escalate residual risks with documented business impact, compensating controls, risk acceptance, accountable ownership, and target dates.

• Maintain alignment with applicable financial reporting, contractual, regulatory, cybersecurity, and internal control requirements.

License and Consumption Governance

• Maintain an evidenced view of access-driven license and consumption demand across supported ERP platforms.

• Govern dormant account reviews, unnecessary access removal, role rationalization, and the license impact of security design decisions.

• Partner with Procurement, Finance, and application owners to support renewals, true-ups, audits, and optimization opportunities.

People and Stakeholder Leadership

• Recruit, lead, develop, and retain a high-performing S&C team; establish objectives, accountability, succession plans, and development priorities.

• Coach managers and team leads while building broader capability across Oracle Fusion Cloud ERP, Costpoint ERP, controls, audit, and access governance.

• Build trusted relationships with business process owners, Finance, HR, Supply Chain, Government/Defense stakeholders, Internal Audit, external auditors, Cybersecurity, Compliance, Legal, and IT leaders.

• Translate technical security and controls issues into clear business risk, impact, options, and recommended decisions for leadership.