Oracle Compliance Lead

Location: Mumbai
Experience: 14 to 17 Years

Role Overview

We are looking for an experienced Oracle Compliance Lead with strong expertise in Oracle Database Administration, database security, audit, risk management, and regulatory compliance. The candidate will be responsible for ensuring Oracle database environments comply with RBI guidelines, cybersecurity standards, internal audit requirements, and industry best practices.

Technical Skills & Expertise

• Strong experience with Oracle Database 11g / 12c / 19c / 21c / 23ai

• Strong knowledge of Oracle Enterprise Manager (OEM)

• Hands-on knowledge of Oracle security features:

• TDE (Transparent Data Encryption)

• Data Redaction

• Oracle Vault

• Experience with:

• Oracle Patching / OPatch

• FPP (Fleet Patching & Provisioning) preferred

• RMAN Backup & Recovery

• Data Guard

• DR Environments

• Good understanding of:

• RBI guidelines and banking regulations

• IT Act

• ISO 27001

• PCI-DSS controls

• CIS Benchmarks / Oracle security best practices

Compliance & Audit Responsibilities

• Ensure Oracle database environments adhere to RBI, internal audit, and cybersecurity compliance requirements

• Implement and monitor database security policies, configuration baselines, and hardening standards

• Maintain compliance with CIS, STIG, and Oracle database security benchmarks

• Periodically review and enforce:

• Access controls

• Privilege management

• Role segregation

• User provisioning/de-provisioning

• Act as SPOC for internal and external audits, including RBI, PwC, IS Audit, and Cyber Audit

• Prepare and present audit evidence, compliance reports, and closure artifacts

• Track and drive audit observations to closure within defined timelines

• Maintain audit-ready repositories containing:

• Audit logs

• Approvals

• SOPs

• Compliance documentation

Security, Vulnerability & Patch Management

• Ensure timely execution of Oracle PSU/CPU patching cycles

• Track and remediate vulnerabilities identified through VA/PT tools such as Qualys and Tenable

• Validate patch compliance and ensure critical vulnerabilities are addressed within SLA

• Coordinate with Infrastructure and Application teams for non-compliance risk mitigation

• Monitor and manage:

• User access provisioning/de-provisioning

• Privileged accounts such as SYS, SYSTEM, and DBA roles

• Password policies

• Account lock mechanisms

• Monitor unauthorized access and support security incident analysis

Reporting & Documentation

• Prepare weekly/monthly compliance dashboards

• Maintain audit-readiness status reports

• Prepare vulnerability and patch compliance reports

• Ensure alert thresholds are appropriately configured to minimize false positives

• Define and maintain Compliance SOPs, Runbooks, and Standard Operating Procedures for database security and audit requirements

• Ensure all documentation is:

• Audit-ready

• Version-controlled

• Reviewed and approved by relevant governance teams

Continuous Improvement & Automation

• Drive Service Improvement Initiatives (SIP) to improve compliance maturity

• Identify opportunities for compliance automation using:

• Scripts

• OEM jobs

• Reporting tools

• Automated compliance checks

• Implement solutions for:

• Automated compliance monitoring

• Scheduled reporting dashboards

• Reduction of manual audit evidence collection

Key Skills

Oracle DBA | Oracle Security | Oracle OEM | TDE | Data Redaction | Oracle Vault | RMAN | Data Guard | OPatch | Database Compliance | RBI Compliance | IT Audit | PCI-DSS | ISO 27001 | CIS Benchmarks | Vulnerability Management | Qualys | Tenable | Audit Management | Database Security

Preferred Candidate Profile

• 1417+ years of overall IT experience
• Strong hands-on Oracle Database Administration experience
• Experience in BFSI / Banking / NBFC / Financial Services environments is highly preferred
• Strong exposure to Oracle database security and compliance
• Proven experience handling internal/external audits
• Strong stakeholder management and communication skills
• Excellent documentation and reporting skills
• Detail-oriented with a strong focus on risk mitigation and compliance adherence
• Ability to work effectively across DB, Infrastructure, Security, Application, and Audit teams