Vendor Master change approval or workflow?

Our internal audit has raised an issue in that changes to our AP vendor master files in Oracle are not approved or controlled. i.e. the same people that issue checks also can make changes to the master file. What we are looking for is some kind of process where AP can enter changes to the vendor file but checks can't be printed until the Controller or CFO approves the vendor master file change.

In what ways can this be achieved?

Oracle version 12.0.6

Thanks!