Does Oracle support table-level & column-level permissions?
Create a view which simply selects all the other columns form the table in question excluding the columns that you don't want the people to have access to.  Give them rights to query the view and not the table.