SQL & Oracle Database Compliance SME — Patch & Risk Lead

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 915,000 - 1,242,000; Full time

Job summary

EY Stay in Compliance seeks a SQL and Oracle Database Compliance SME to support governance and risk management for SQL Server, Oracle DB, Exadata and related platforms.

You will monitor vulnerability scans, coordinate patching, track lifecycle status and contribute to compliance reporting. You will work with Database Engineering, Information Security and Service Management to translate advisories into remediation steps and provide evidence for audits.

Qualifications

• Bachelor’s degree and enterprise SQL/Oracle experience.
• Experience with vulnerability remediation, patching and compliance reporting.
• Experience with SQL Server 2016 through 2025 and Oracle DB environments.

Responsibilities

• Serve as product-specific compliance SME for SQL Server and Oracle platforms.
• Monitor database, OS and security alerts; identify vulnerabilities and gaps.
• Assess impact, versions, exploitability, and risk; support prioritisation.
• Coordinate remediation with Database Engineering and Operations.
• Maintain visibility of SQL Server/Oracle estates and patch status.
• Prepare governance reports and track remediation actions and evidence.
• Support audits and control reviews with timely, traceable evidence.
• Collaborate with cross-functional teams and vendors within governance.

Skills

SQL Server

Oracle DB

Patching

Vulnerability remediation

Governance reporting

Power BI

Azure Arc SQL

Always On

Exadata

Education

Bachelor’s degree in Computer Science, IT, Engineering or related

Tools

Oracle Database Appliance

Exadata

Job description

EY Stay in Compliance seeks a SQL and Oracle Database Compliance SME to support governance and risk management for SQL Server, Oracle DB, Exadata and related platforms.

You will monitor vulnerability scans, coordinate patching, track lifecycle status and contribute to compliance reporting. You will work with Database Engineering, Information Security and Service Management to translate advisories into remediation steps and provide evidence for audits.