IT Security Administrator

Security Administrator - IT

Exelon is helping build a more affordable, reliable energy future for the communities we serve. We're looking for people who are ready to make a difference and work together to deliver the energy our customers count on every day. As a Fortune 200 company and one of the nation's largest utility companies, we have more than 20,000 colleagues who serve nearly 11 million customers through six fully regulated utilities. Exelon is built by people who put safety first, work together to solve problems and show up every day for our customers and communities. We believe strong teams are built on trust, respect and a shared commitment to high-performance culture. And our commitment to employees includes creating an environment where people can grow, develop new skills and build thriving careers. We know this work isn't easy. That's why we offer competitive compensation, incentives, excellent benefits and the opportunity to build a rewarding career. No matter your role, you will be part of a team that is committed to making a difference, improving how we work and delivering for the people who depend on us. Are you on for the challenge?

Primary Purpose

The Security Administrator - IT supports the design, governance, and execution of Oracle ERP and Oracle Cloud Infrastructure (OCI) security controls, with primary accountability for SOX-compliant access management, role creation, and audit readiness. This role serves on a team of security administrators, partnering closely with Internal Audit, SOX Compliance, IT, and finance business stakeholders to ensure access controls are effective, scalable, and defensible.

Position may be required to work extended hours, including 24 x 7 coverage during storms or other energy delivery emergencies.

This is a multiple-location posting. The selected candidate may be based out of our Exelon Corporate Office locations in Baltimore, MD, Philadelphia, PA, Chicago, IL, Oakbrook Terrace, IL, Washington, DC

Primary Duties

• Assist in the design, creation, governance, standards, lifecycle management, and ongoing rationalization of Oracle ERP and OCI roles, partnering with functional, technical, and cloud teams to translate business and infrastructure needs into secure, least-privilege access models while supporting projects, operations, and application maintenance within defined service levels. (40%)
• Support the development of SOX access controls for Oracle ERP and OCI by ensuring ITGCs and application controls operate effectively, preparing complete audit evidence, assisting with remediation of audit findings, and maintaining control narratives, procedures, and process documentation. (25%)
• Govern privileged access across Oracle ERP and OCI by ensuring formal approvals, documented business justification, least-privilege alignment, periodic reviews, timely Joiner/Mover/Leaver access changes, and alignment of OCI administrative roles with enterprise security standards. (15%)
• Assist with Security Administration and IAM activities in accordance with defined performance, quality, compliance, and audit readiness requirements, addressing identified control gaps Resolving role design and SoD issues; and Ensure solutions meet business requirements and service levels. (15%)
• Support governance forums, track control and provisioning metrics, and identify opportunities to automate role assignments, provisioning, and audit evidence collection. (5%)

Job Scope

• Operates under supervision and oversight.
• Position interacts with all levels of employees, including executives, vendors, involved in performance, maintenance, review, approval, testing and communication of business plans and services.
• Verify and clarify the needs and expectations of stakeholders. Responds quickly and efficiently to requests.
• Meets the continuing service needs of stakeholders, including requests for changes in work content.
• Responds to customers with an appropriate level of urgency, energy, persistence and tenacity.
• Independently develops alternatives and options to meet work objectives.

Minimum Qualifications

• Bachelor's degree in computer science or related discipline and 2-4 years' relevant experience in security administration, IAM, or application/cloud security; or 3-6 years equivalent combination of education and comparable work experience.
• Hands-on Oracle ERP, Oracle EPM, and OCI IAM experience;
• Strong documentation and communication skills

Preferred Qualifications

• Experience in Security Administration for SaaS applications (ERP, EPM, IAM, FAW, VBCS OIC).
• Understanding of SOX compliance and least privilege access principles
• Experience with mixed ERP and cloud security governance, Oracle-focused SoD or GRC tools
• Experience with integration of Oracle access workflows with ITSM platforms such as SailPoint
• Relevant certifications such as CISSP, CISM, CRISC, or Oracle Security.
• Demonstrated SOX access control ownership.