SQL and Oracle Database Compliance SME
EY · Taguig
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Job Title:
SQL and Oracle Database Compliance SME Rank:
Supervising Associate Location:
GDS Kochi
Job Summary:
The SQL and Oracle Database Compliance SME supports the Stay in Compliance Lead by managing compliance activities for the organisation’s Microsoft SQL Server and Oracle database infrastructure. The role covers Oracle Database Appliance and Exadata platforms, together with dedicated and consolidated SQL Server environments running SQL Server 2016 through SQL Server 2025, including SQL Server Always On configurations. The role helps maintain secure, supported and compliant database services through vulnerability monitoring, patch and version currency, configuration assurance, high-availability control validation and lifecycle management.
Working with Database Engineering, Database Operations, Information Security, Service Management, application owners and vendors, the role detects and assesses alerts and vulnerabilities, supports risk-based prioritisation and remediation, improves patching and compliance processes, and produces governance reporting. The position provides product-specific subject-matter expertise and clear escalation to the Stay in Compliance Lead, without owning the broader infrastructure compliance programme.
Job Description
- • Serve as the product-specific compliance SME for Microsoft SQL Server and Oracle database infrastructure, including Oracle Database Appliance, Exadata, dedicated SQL servers and consolidated SQL platforms.
- • Monitor database, operating-system, security and vendor alerts; identify vulnerabilities and compliance gaps affecting supported database platforms and associated management components.
- • Assess technical impact, affected versions, exploitability, availability dependencies and business risk, and support risk-based prioritisation in line with agreed standards and SLAs.
- • Coordinate remediation of database vulnerabilities, unsupported versions, missing patches, configuration weaknesses and appliance or server lifecycle risks with Database Engineering and Database Operations.
- • Maintain visibility of SQL Server 2016 through SQL Server 2025 estates, including dedicated and consolidated deployments, and track version, cumulative update, security update and support status.
- • Validate compliance considerations for SQL Server Always On availability groups, including replica health, failover readiness, listener and clustering dependencies, patch sequencing and post-change evidence.
- • Maintain compliance visibility across Oracle Database Appliance and Exadata platforms, covering database, appliance, operating-system, storage-server and associated infrastructure patching as applicable.
- • Review Microsoft and Oracle security advisories, release notes, critical patch updates, known issues and prerequisites, and translate findings into clear remediation actions.
- • Track remediation actions, ageing, exceptions, dependencies and closure evidence, escalating material risk, unsupported versions or delivery delays to the Stay in Compliance Lead.
- • Support change, patching and upgrade activities by validating readiness, backups, high-availability safeguards, rollback plans, implementation evidence and post-remediation compliance status.
- • Maintain product compliance records covering software and appliance currency, support lifecycle, security findings, approved exceptions, ownership and control evidence.
- • Analyse estate, vulnerability and remediation data using SQL and Power BI to produce dashboards, trend analysis, SLA metrics and management reporting.
- • Prepare regular governance and compliance reports for the Stay in Compliance Lead, highlighting exposure, patch status, remediation progress, exceptions and emerging risks.
- • Identify opportunities to improve vulnerability assessment, patch planning, evidence collection, alert handling, asset data quality and compliance reporting.
- • Support audits and control reviews by providing timely, complete and traceable evidence for the in-scope SQL Server and Oracle estate.
- • Build effective working relationships across Database Engineering, Database Operations, Information Security, Service Management, application teams, Microsoft and Oracle while operating within the governance direction set by the Stay in Compliance Lead.
Knowledge & Competencies Required:
- • Practical knowledge of enterprise database operations, including database provisioning, patching, upgrades, backup and recovery, high availability, disaster recovery, monitoring and performance concepts.
- • Hands-on knowledge of Microsoft SQL Server 2016 through SQL Server 2025 across dedicated and consolidated server environments.
- • Working knowledge of SQL Server Always On availability groups, Windows Server Failover Clustering, replicas, listeners, failover, health validation and patching considerations.
- • Working knowledge of Azure Arc-enabled SQL Server environments, including onboarding, centralised inventory and governance, monitoring, security and compliance assessment, Azure Policy, role-based access control and management of on-premises and multicloud SQL Server instances.
- • Hands-on knowledge of Oracle databases hosted on Oracle Database Appliance and Exadata platforms, including consolidated and business-critical environments.
- • Understanding of Oracle patching concepts, Critical Patch Updates, Release Updates, appliance and Exadata system software maintenance, and associated operating-system or infrastructure dependencies.
- • Understanding of vulnerability management, security alert handling, risk assessment, remediation SLAs, patch currency, configuration compliance and product lifecycle controls.
- • Ability to interpret Microsoft and Oracle advisories, CVEs, severity scores, release notes and scan findings and translate them into prioritised technical actions.
- • Proficiency with SQL and Power BI for estate analysis, dashboard development, remediation tracking and compliance reporting.
- • Strong analytical and problem-solving skills, with attention to evidence quality, data accuracy, service availability and control traceability.
- • Experience improving database patching and compliance processes through standardisation, automation and measurable controls.
- • Clear written and verbal communication skills, with the ability to explain database risks and remediation status to technical and non-technical stakeholders.
- • Ability to work independently as an SME, coordinate across teams and escalate appropriately within established governance.
Job Requirements:
Education:
Bachelor’s degree in Computer Science, Information Technology, Engineering or a related technical discipline, or equivalent relevant experience.
Experience:
Relevant experience supporting enterprise Microsoft SQL Server and Oracle database platforms, with demonstrated involvement in vulnerability remediation, patch and upgrade coordination, high availability, lifecycle management, compliance reporting or database operations.
Certification Requirements:
Microsoft SQL Server, Oracle Database, Oracle Database Appliance, Exadata, ITIL, information security or Power BI certifications are advantageous but not mandatory.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.