Hi Sai
Understand you may not be able to change your design
If you do eventually and use the BRM functionality you would have organisational maps that would facilitate updating derived roles
Business Roles could also be built for the combination of access (e.g. Position + Control Role).
Regards
Colleen