Data Security Analyst (Work from Home)

SPECIFIC DUTIES AND RESPONSIBILITIES

Security Operations and Compliance Management

• Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements.
• Coordinate application onboarding activities to facilitate successful integration into enterprise security and compliance programs.
• Conduct and support physical site inspection activities to validate compliance with security standards and controls.
• Maintain compliance records and attestations to support audit readiness and regulatory reporting requirements.

Data Protection and Security Monitoring

• Operate enterprise data discovery and monitoring activities to identify and protect sensitive information across systems and applications.
• Analyze security scan results to validate findings and support risk identification and remediation efforts.
• Classify and assess sensitive data assets to ensure appropriate protection measures are applied.
• Troubleshoot security scan failures and operational issues to maintain monitoring effectiveness and compliance coverage.

Incident Management and Stakeholder Engagement

• Manage incidents, service requests, and escalation activities to ensure timely resolution of security-related concerns.
• Collaborate with technical and business stakeholders to drive remediation plans and improve security compliance outcomes.
• Communicate security findings, risks, and operational updates to stakeholders to support informed decision-making.

Process Improvement and Automation

• Develop and maintain scripts and automation solutions to improve operational efficiency and reduce manual effort.
• Identify opportunities for continuous improvement to enhance security operations, compliance processes, and service delivery effectiveness.

COMPETENCIES

Core Competencies (Must-have Competencies)

• Data Security and Sensitive Information Protection: Ability to identify, classify, monitor, and protect sensitive organizational data including PII, PCI, and PHI information in accordance with security policies and compliance requirements.
• PCI DSS Compliance Management: Ability to support PCI DSS compliance activities, application onboarding, control validation, and audit preparedness to maintain regulatory compliance.
• Security Operations and Incident Management: Ability to manage incidents, perform security triage, investigate issues, coordinate escalations, and facilitate timely resolution of operational security events.
• Systems, Database, and Infrastructure Security: Knowledge of operating systems, databases, application architecture, and network security concepts to support security analysis and risk mitigation activities.
• Security Automation and Scripting: Ability to utilize scripting and automation techniques to streamline recurring security operations and improve service efficiency.

Complementary Competencies (Good-to-have Competencies)

• Data Privacy and Regulatory Awareness: Understanding of data privacy regulations and governance frameworks including PIPEDA, Law 25, PHIPA, GDPR, data classification, retention, and safeguarding requirements.
• Testing and Deployment Support: Familiarity with UI testing, production validation activities, and CI/CD practices that support secure application delivery.
• Stakeholder Relationship Management: Ability to influence, communicate, and collaborate effectively with technical and business stakeholders, particularly in security and compliance-driven environments.

QUALIFICATIONS

Educational Qualifications:

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Security, or a related discipline.

Preferred:

• Cybersecurity, Information Assurance, or related specialization.
• Professional certifications such as: CIPT, CISSP, CEH, CompTIA Security+, ITIL Foundation, Cloud Security or Cloud Platform Certifications, PCI DSS-related certifications or training

Professional Qualifications

• Minimum 2 years of experience supporting cybersecurity, data security, compliance, or information protection functions.
• Minimum 2 years of experience administering or supporting Linux and Windows environments.
• Minimum 2 years of experience utilizing PowerShell, Bash, Python, or similar scripting technologies.
• Experience managing incidents, requests, and operational workflows within IT Service Management environments.
• Experience supporting security monitoring, vulnerability identification, or data discovery activities
• Experience working with database technologies including Oracle, Microsoft SQL Server, DB2, PostgreSQL, or MySQL.
• Knowledge of application architecture, web security concepts, and network security fundamentals.
• Understanding of PCI DSS compliance principles and security control implementation.
• Experience collaborating with cross-functional technical teams to drive remediation and operational improvements.

Work Conditions

• Work Schedule: Monday to Friday, Golden Hours (4PM-1AM Manila)
• Location: NQX Philippines