Functional Application Security Finance Managed Services Consultant

Deloitte is looking for a Finance Managed Services Consultant to support application security and access-control activities for Momentum ERP as part of its finance managed services. This hybrid role is based in Rosslyn, VA and involves close collaboration with product and engineering teams to strengthen security testing, access governance, and go-live readiness.

The role includes administering user access and account lifecycle processes, configuring role-based access controls, and embedding security requirements into functional work. You will also conduct functional application security testing across key authentication and authorization areas, while partnering with stakeholders to support access reviews, audit requests, and pre-release assessments.

What you will do

• Administer user access requests and account lifecycle activities, including provisioning, modifying, and decommissioning accounts in alignment with cybersecurity controls and processes within Momentum.
• Configure and maintain user roles, permissions, and access profiles, ensuring alignment with role based access control (RBAC) and separation of duties requirements.
• Conduct functional application security testing focused on authentication, authorization, session management, data handling, business logic, and integrations.
• Embed security requirements into user stories, acceptance criteria, functional designs, and configuration changes, and help identify and close security gaps.
• Partner with product owners, developers, QA teams, and stakeholders to support access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Collaborate with stakeholders to inform enterprise resource planning strategy and roadmap decisions based on security, access-control, and operational needs.

Requirements

• Bachelor's degree.
• 4+ years of experience supporting Momentum ERP as an application security analyst, including user and application administration.
• 3+ years of experience configuring and testing role-based access controls, separation-of-duties controls, authentication, authorization, session management, data handling, and business logic controls in enterprise applications.
• Experience supporting cloud-hosted enterprise applications with access-control and audit requirements.
• Active Top Secret security clearance required, with eligibility for upgrade to SCI.
• Must reside within commutable distance of the assigned office and be able to commute daily without the need for overnight accommodations.
• Co-location expected on average 5 times per week in Rosslyn, VA.
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Technologies

• Momentum
• Momentum ERP
• Role based access control (RBAC)

Compensation

USD 72,900 - 121,500 per year.

Incentive eligibility

You may be eligible to participate in a discretionary annual incentive program, subject to the program’s rules, where awards depend on factors including individual and organizational performance.

Preferred qualifications

• Experience executing security test cases aligned with business scenarios in Momentum applications.
• Experience embedding security requirements in user stories, acceptance criteria, functional designs, and configuration changes.
• Experience supporting access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Experience validating handling of personally identifiable information (PII), financial data, or regulated data in enterprise applications.