Database Compliance SME

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Job Title:
SQL and Oracle Database Compliance SME    Rank: 
Supervising Associate    Location: 
GDS Kochi    
Job Summary:

The SQL and Oracle Database Compliance SME supports the Stay in Compliance Lead by managing compliance activities for the organisation’s Microsoft SQL Server and Oracle database infrastructure. The role covers Oracle Database Appliance and Exadata platforms, together with dedicated and consolidated SQL Server environments running SQL Server 2016 through SQL Server 2025, including SQL Server Always On configurations. The role helps maintain secure, supported and compliant database services through vulnerability monitoring, patch and version currency, configuration assurance, high-availability control validation and lifecycle management.

Working with Database Engineering, Database Operations, Information Security, Service Management, application owners and vendors, the role detects and assesses alerts and vulnerabilities, supports risk-based prioritisation and remediation, improves patching and compliance processes, and produces governance reporting. The position provides product-specific subject-matter expertise and clear escalation to the Stay in Compliance Lead, without owning the broader infrastructure compliance programme.

Job Description

•    Serve as the product-specific compliance SME for Microsoft SQL Server and Oracle database infrastructure, including Oracle Database Appliance, Exadata, dedicated SQL servers and consolidated SQL platforms.
•    Monitor database, operating-system, security and vendor alerts; identify vulnerabilities and compliance gaps affecting supported database platforms and associated management components.
•    Assess technical impact, affected versions, exploitability, availability dependencies and business risk, and support risk-based prioritisation in line with agreed standards and SLAs.
•    Coordinate remediation of database vulnerabilities, unsupported versions, missing patches, configuration weaknesses and appliance or server lifecycle risks with Database Engineering and Database Operations.
•    Maintain visibility of SQL Server 2016 through SQL Server 2025 estates, including dedicated and consolidated deployments, and track version, cumulative update, security update and support status. •    Validate compliance considerations for SQL Server Always On availability groups, including replica health, failover readiness, listener and clustering dependencies, patch sequencing and post-change evidence. •    Maintain compliance visibility across Oracle Database Appliance and Exadata platforms, covering database, appliance, operating-system, storage-server and associated infrastructure patching as applicable. •    Review Microsoft and Oracle security advisories, release notes, critical patch updates, known issues and prerequisites, and translate findings into clear remediation actions. •    Track remediation actions, ageing, exceptions, dependencies and closure evidence, escalating material risk, unsupported versions or delivery delays to the Stay in Compliance Lead. •    Support change, patching and upgrade activities by validating readiness, backups, high-availability safeguards, rollback plans, implementation evidence and post-remediation compliance status. •    Maintain product compliance records covering software and appliance currency, support lifecycle, security findings, approved exceptions, ownership and control evidence. •    Analyse estate, vulnerability and remediation data using SQL and Power BI to produce dashboards, trend analysis, SLA metrics and management reporting. •    Prepare regular governance and compliance reports for the Stay in Compliance Lead, highlighting exposure, patch status, remediation progress, exceptions and emerging risks. •    Identify opportunities to improve vulnerability assessment, patch planning, evidence collection, alert handling, asset data quality and compliance reporting. •    Support audits and control reviews by providing timely, complete and traceable evidence for the in-scope SQL Server and Oracle estate. •    Build effective working relationships across Database Engineering, Database Operations, Information Security, Service Management, application teams, Microsoft and Oracle while operating within the governance direction set by the Stay in Compliance Lead.