EY—Storage Compliance SME

Job description

Description: At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Job Title: Storage Compliance SME Job Summary: The Storage Compliance SME supports the Stay in Compliance Lead by managing compliance activities for the organisation’s block and file storage infrastructure. The role focuses on Dell PowerScale and Unity platforms, Unity VSA and Brocade Fibre Channel switches, helping to maintain secure, supported and compliant storage services through vulnerability monitoring, software and firmware currency, configuration assurance and lifecycle controls. Working with Storage Engineering, Storage Operations, Information Security, Service Management, product owners and vendors, the role detects and assesses alerts and vulnerabilities, supports risk-based prioritisation and remediation, improves operational processes, and produces governance and compliance reporting. The position provides product-specific subject-matter expertise and clear escalation to the Stay in Compliance Lead, without owning the broader infrastructure compliance programme. Job Description - Serve as the product-specific compliance SME for block and file storage infrastructure, with primary focus on Dell PowerScale, Dell Unity, Unity VSA and Brocade Fibre Channel switches. - Monitor storage, security and vendor alerts; identify vulnerabilities and compliance gaps affecting supported storage platforms and associated management tooling. - Assess technical impact, scope, exploitability and business risk, and support risk-based prioritisation of remediation activities in line with agreed standards and SLAs. - Coordinate remediation of security vulnerabilities, unsupported software or firmware, configuration issues and lifecycle risks with Storage Engineering and Storage Operations teams. - Track remediation actions, ageing, exceptions, dependencies and closure evidence, escalating material risks or delays to the Stay in Compliance Lead. - Maintain product compliance records covering software and firmware currency, hardware lifecycle status, security findings, control evidence and approved risk exceptions. - Use Superna, Securiti AI, Veeam, TreeSize Professional and SpaceObServer to support monitoring, data protection, capacity visibility, file analytics and compliance activities, as applicable. - Analyse operational and compliance data using Microsoft SQL and Power BI to produce accurate dashboards, metrics, trend analysis and management reporting. - Prepare regular governance and compliance reports for the Stay in Compliance Lead, highlighting exposure, remediation progress, SLA performance, exceptions and emerging risks. - Review OEM advisories and security bulletins, engage vendors where clarification is required, and translate findings into practical actions for storage teams. - Support change, patching and upgrade activities by validating compliance requirements, implementation evidence and post-remediation status. - Identify opportunities to improve vulnerability assessment, remediation tracking, evidence collection, alert handling and compliance reporting processes. - Support audits and control reviews by providing timely, complete and traceable evidence for the in-scope storage estate. - Build effective working relationships across Storage Engineering, Storage Operations, Information Security, Service Management and vendor teams while operating within the governance direction set by the Stay in Compliance Lead. Knowledge & Competencies Required: - Practical knowledge of enterprise block and file storage operations, including NAS, SAN, Fibre Channel, storage provisioning, capacity management, replication, backup and recovery concepts. - Hands-on knowledge of Dell PowerScale, Dell Unity and Unity VSA platforms, together with Brocade Fibre Channel switches. - Working knowledge of Superna, Securiti AI, Veeam, TreeSize Professional and SpaceObServer, or comparable storage monitoring, security, backup, analytics and capacity-management tools. - Understanding of vulnerability management, security alert handling, risk assessment, remediation SLAs, patching, firmware currency and infrastructure lifecycle controls. - Ability to interpret OEM advisories, security bulletins and scan findings and translate them into clear, prioritised technical actions. - Proficiency with Microsoft SQL and Power BI for data analysis, dashboard development and compliance reporting. - Strong analytical and problem-solving skills, with attention to evidence quality, data accuracy and control traceability. - Experience improving operational processes through standardization, automation and measurable controls. - Clear written and verbal communication skills, with the ability to explain storage risks and remediation status to technical and non-technical stakeholders. - Ability to work independently as an SME, coordinate across teams and escalate appropriately within established governance. Job Requirements: Education: - Bachelor’s degree in Computer Science, Information Technology, Engineering or a related technical discipline, or equivalent relevant experience. Experience: Relevant experience supporting enterprise block and file storage platforms, with demonstrated involvement in compliance, vulnerability remediation, lifecycle management, reporting or storage operations. Certification Requirements: Dell storage, Brocade Fibre Channel, Veeam, ITIL, information security or Power BI certifications are advantageous but not mandatory. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.