Functional Application Security Finance Managed Services Consultant

Our Deloitte Finance Transformation team practices to help chief financial officers, controllers, and finance teams define and execute their finance and global business services agendas and strategies. You will work with leading-class teams and solutions, helping clients navigate challenging environments, market uncertainty, technology development, and regulatory considerations to unlock value. Your work may span strategy, operations, process design, and technology as we partner with clients to transform finance.

Work You’ll Do

As Project - Consultant, Finance Managed Services on the Finance Managed Services team, you will be responsible for…

• Administer user access requests and account lifecycle activities, including provisioning, modifying, and decommissioning accounts in accordance with cybersecurity controls and processes within Momentum .
• Configure and maintain user roles, permissions, and access profiles in alignment with role based access control (RBAC) and separation of duties requirements.
• Perform functional application-security testing of authentication, authorization, session management, data handling, business logic, and integrations.
• Embed security requirements in user stories, acceptance criteria, functional designs, and configuration changes; identify and help close security gaps.
• Partner with product owners, developers, quality assurance teams, and stakeholders to support access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Collaborate with stakeholders to inform enterprise resource planning strategy and roadmap decisions based on security, access-control, and operational needs.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships

The Team

Deloitte’s Government & Public Services (GPS) practice – our people, ideas, technology and outcomes – is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Finance Strategy offering serves as the front door to the evolving CFO Agenda by guiding executive clients to reimagine capabilities across their organizations via deep Finance discipline – from Operations to Business Partnering - to deliver trusted, efficient, value centric outcomes for the global enterprise. Includes strategy development, road mapping, strategic PMO, enterprise value creation, and finance automation and innovation.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications

Required: 

• Bachelor’s degree
• 4+ years of experience supporting Momentum ERP as an application security analyst, including user and application administration.
• 3+ years of experience configuring and testing role-based access controls, separation-of-duties controls, authentication, authorization, session management, data handling, and business logic controls in enterprise applications.
• Experience supporting cloud-hosted enterprise applications subject to access-control and audit requirements.
• Active Top Secret security clearance required with eligibility for upgrade to SCI
• You must reside within a commutable distance of your assigned office with the ability to commute daily, if required, without the need for overnight accommodations.
• You can expect to co-locate on average 5 times a week to Rosslyn, VA.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

• Experience executing security test cases aligned with business scenarios in Momentum applications.
• Experience embedding security requirements in user stories, acceptance criteria, functional designs, and configuration changes.
• Experience supporting access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Experience validating the handling of personally identifiable information (PII), financial data, or regulated data in enterprise applications.