Data Security Analyst

Paymentus; Richmond Hill; On-site; CAD 65,000 - 90,000; Full time

Job summary

Paymentus is seeking a Data Security Analyst to join our Cyber Security team with a focus on Data Loss Prevention (DLP). This role will monitor alerts, investigate incidents, maintain policies, and help protect sensitive data across cloud, endpoint, email, and SaaS environments.

The ideal candidate is eager to grow their cybersecurity skills and enjoys solving technical problems while working with a collaborative security team.

Qualifications

• 1–3 years of cybersecurity or information security experience.
• Basic understanding of DLP concepts and data protection principles.
• Familiarity with cloud and SaaS environments (Google Workspace, AWS, Azure).
• Experience with security technologies such as email or endpoint security tools.
• Strong troubleshooting and analytical communication skills.

Responsibilities

• Monitor and investigate DLP alerts and data security incidents.
• Tune DLP policies to improve detection accuracy and reduce false positives.
• Protect sensitive data across endpoints, cloud, email, and SaaS apps.
• Document investigation findings and escalate complex incidents when needed.
• Support governance and regulatory compliance initiatives (PCI-DSS, SOC 2, GDPR).

Skills

DLP concepts

Cybersecurity

Troubleshooting

Communication skills

Tools

Cyberhaven

Microsoft Purview

Proofpoint

Symantec

PowerShell

Python

Job description

Paymentus is seeking a Data Security Analyst to join our Cyber Security team with a focus on Data Loss Prevention (DLP). This role will support the day-to-day operation of the organization's DLP program by monitoring alerts, investigating incidents, maintaining policies, and helping protect sensitive data across cloud, endpoint, email, and SaaS environments. The ideal candidate is eager to grow their cybersecurity skills and enjoys solving technical problems while working with a collaborative security team.

Essential Functions/ Responsibilities

DLP Operations

• Monitor and investigate DLP alerts and potential data security incidents.
• Assist with tuning DLP policies to improve detection accuracy and reduce false positives.
• Support the protection of sensitive data across endpoints, email, cloud, and SaaS applications.
• Document investigation findings and escalate complex incidents when necessary.
• Maintain DLP documentation, playbooks, and operational procedures.
• Track and report DLP metrics, trends, and recurring issues.
• Assist users with DLP-related questions and policy guidance.

Security Operations

• Work with Security Operations to investigate data security events.
• Help identify root causes of DLP incidents and recommend improvements.
• Assist with testing new DLP policies before production deployment.
• Support troubleshooting of DLP tools and policy issues.
• Participate in incident response activities involving data security events.

Automation & Tool Support

• Assist with basic scripting and automation to improve reporting and operational efficiency.
• Help integrate DLP alerts into existing security workflows.
• Support ongoing maintenance and optimization of DLP technologies.

Governance & Compliance

• Support compliance initiatives including PCI-DSS, SOC 2, GDPR, and other applicable regulations.
• Assist with audit requests by gathering evidence and documentation.
• Help maintain data protection standards, documentation, and operational procedures.
• Follow established data handling and security best practices.
• Work with Engineering, IT, Product, HR, Legal, and business teams to support secure handling of sensitive information.
• Participate in security awareness initiatives related to data protection.
• Stay current on emerging threats and best practices related to DLP and data protection.
• Contribute to continuous improvements in the organization's data security program.

Supervisory Responsibility

This position does not have any supervisory responsibility

Education and Experience

Required

• 1–3 years of experience in Cybersecurity, Information Security, IT Operations, or a related technical role.
• Basic understanding of Data Loss Prevention (DLP) concepts and data protection principles.
• Familiarity with cloud and SaaS environments (Google Workspace, AWS, Azure, etc.).
• Experience working with security technologies such as email security, endpoint security, or similar tools.
• Strong troubleshooting and analytical skills.
• Excellent written and verbal communication skills.

Nice to Have

• Experience with DLP technologies such as Cyberhaven, Microsoft Purview, Proofpoint, Symantec, or similar solutions.
• Basic scripting or automation experience (PowerShell, Python, Bash, or similar).
• Familiarity with Microsoft 365 or Google Workspace administration.
• Basic understanding of identity and access management concepts (e.g., Okta or Microsoft Entra ID).
• Knowledge of compliance frameworks such as PCI-DSS, SOC 2, GDPR, or ISO 27001.
• Security+, SC-900, AZ-900, or similar entry-level security certifications

Soft Skills

• Strong interest in cybersecurity and data protection.
• Detail-oriented with strong organizational skills.
• Excellent analytical and problem-solving abilities.
• Eager to learn new technologies and security concepts.
• Able to manage multiple priorities in a fast-paced environment.
• Strong communication and collaboration skills.
• Self-motivated with a proactive approach to continuous learning.
• Demonstrates an automation mindset and seeks opportunities to improve operational efficiency.

This job operates on-site at our Richmond Hill office. This role routinely uses standard office equipment such as laptop computers, photocopiers and smartphones.

Physical Demands

While performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision and ability to adjust focus. Must be able to lift up to 15 pounds at times.

Position Type/Expected Hours of Work

This is a full-time position. Days and hours of work are Monday through Friday, during normal business hours. Occasional evening and weekend work may be required as job duties demand.

EEO Statement

Paymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.

Reasonable Accommodation

Paymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or others.

An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct supervisor.