Functional Application Security Finance Managed Services Consultant

Deloitte is seeking a Functional Application Security Finance Managed Services Consultant to support finance managed services for Momentum ERP. The role focuses on application security testing, access management, and embedding security requirements into delivery activities, while coordinating with product and engineering stakeholders to support access reviews, audit requests, and go-live readiness.

• Location: Rosslyn, VA (hybrid)
• On-site expectation: co-locate on average 5 times per week to Rosslyn, VA
• Commuting requirement: reside within a commutable distance of the assigned office with the ability to commute daily, if required, without overnight accommodations

• Salary range: USD 72, per year

• Administer user access requests and account lifecycle activities, including provisioning, modifying, and decommissioning accounts in accordance with cybersecurity controls and processes within Momentum.
• Configure and maintain user roles, permissions, and access profiles aligned with role based access control (RBAC) and separation of duties requirements.
• Conduct functional application-security testing across authentication, authorization, session management, data handling, business logic, and integrations.
• Embed security requirements in user stories, acceptance criteria, functional designs, and configuration changes, and identify security gaps to support closure activities.
• Partner with product owners, developers, quality assurance teams, and stakeholders to support access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Collaborate with stakeholders to inform enterprise resource planning strategy and roadmap decisions based on security, access-control, and operational needs.

• Education: Bachelor's degree
• Experience: 4+ years supporting Momentum ERP as an application security analyst, including user and application administration
• 3+ years configuring and testing role-based access controls, separation-of-duties controls, authentication, authorization, session management, data handling, and business logic controls in enterprise applications
• Experience supporting cloud-hosted enterprise applications subject to access-control and audit requirements
• Clearance: Active Top Secret security clearance required with eligibility for upgrade to SCI
• Legally authorized to work in the United States without employer sponsorship, now or in the future

• Momentum
• Momentum ERP
• Role based access control (RBAC)

• You may be eligible to participate in a discretionary annual incentive program, subject to program rules, where any award depends on factors including individual and organizational performance.

• Experience executing security test cases aligned with business scenarios in Momentum applications
• Experience embedding security requirements in user stories, acceptance criteria, functional designs, and configuration changes
• Experience supporting access reviews, audit requests, pre-release security reviews, and go-live readiness assessments
• Experience validating handling of personally identifiable information (PII), financial data, or regulated data in enterprise applications