IT Security Administrator

Exelon is helping build a more affordable, reliable energy future for the communities we serve. We're looking for people who are ready to make a difference and work together to deliver the energy our customers count on every day.

As a Fortune 200 company and one of the nation's largest utility companies, we have more than 20,000 colleagues who serve nearly 11 million customers through six fully regulated utilities - Atlantic City Electric (ACE), Baltimore Gas and Electric (BGE), Commonwealth Edison (Com Ed), Delmarva Power & Light (DPL), PECO Energy Company (PECO), and Potomac Electric Power Company (Pepco).

Exelon is built by people who put safety first, work together to solve problems and show up every day for our customers and communities. We believe strong teams are built on trust, respect and a shared commitment to high-performance culture. And our commitment to employees includes creating an environment where people can grow, develop new skills and build thriving careers.

We know this work isn't easy. That's why we offer competitive compensation, incentives, excellent benefits and the opportunity to build a rewarding career. No matter your role, you will be part of a team that is committed to making a difference, improving how we work and delivering for the people who depend on us.

Are you on for the challenge?

The Security Administrator - IT supports the design, governance, and execution of Oracle ERP and Oracle Cloud Infrastructure (OCI) security controls, with primary accountability for SOX-compliant access management, role creation, and audit readiness. This role serves on a team of security administrators, partnering closely with Internal Audit, SOX Compliance, IT, and finance business stakeholders to ensure access controls are effective, scalable, and defensible.

Position may be required to work extended hours, including 24 x 7 coverage during storms or other energy delivery emergencies.

• Assist in the design, creation, governance, standards, lifecycle management, and ongoing rationalization of Oracle ERP and OCI roles, partnering with functional, technical, and cloud teams to translate business and infrastructure needs into secure, least-privilege access models while supporting projects, operations, and application maintenance within defined service levels. (40%)
• Support the development of SOX access controls for Oracle ERP and OCI by ensuring ITGCs and application controls operate effectively, preparing complete audit evidence, assisting with remediation of audit findings, and maintaining control narratives, procedures, and process documentation. (25%)
• Govern privileged access across Oracle ERP and OCI by ensuring formal approvals, documented business justification, least-privilege alignment, periodic reviews, timely Joiner/Mover/Leaver access changes, and alignment of OCI administrative roles with enterprise security standards. (15%)
• Assist with Security Administration and IAM activities in accordance with defined performance, quality, compliance, and audit readiness requirements, addressing identified control gaps Resolving role design and SoD issues; and Ensure solutions meet business requirements and service levels. (15%)
• Support governance forums, track control and provisioning metrics, and identify opportunities to automate role assignments, provisioning, and audit evidence collection. (5%)

• Operates under supervision and oversight.
• Position interacts with all levels of employees, including executives, vendors, involved in…