Data Security Analyst (Work from Home)

Quantrics Enterprises Inc.; Manila; On-site; PHP 600,000 - 1,100,000; Full time

Job summary

Quantrics Enterprises Inc. in Manila is seeking a Security Compliance Analyst to support PCI DSS initiatives, onboarding of applications, and ongoing compliance monitoring across systems and databases.

The role involves incident management collaboration with stakeholders, data protection activities, and automation of routine security operations using scripting through PowerShell, Bash, and Python. A Bachelor’s in IT/CS and 2+ years in cybersecurity are preferred.

Qualifications

• Must have experience in data protection, risk assessment, and regulatory compliance.
• Strong knowledge of PCI DSS and security controls and audit readiness.
• Experience with security monitoring, incident response, and remediation coordination.

Responsibilities

• Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements.
• Coordinate application onboarding activities to facilitate integration into enterprise security programs.
• Conduct and support physical site inspections to validate security controls.
• Maintain compliance records and attestations for audit readiness and reporting.
• Operate enterprise data discovery and monitoring activities to identify sensitive information across systems.
• Analyze security scan results to validate findings and support risk identification and remediation.
• Classify and assess sensitive data assets to ensure proper protection.
• Troubleshoot security monitoring failures and operational issues.

Skills

Data Security & Protection

PCI DSS Compliance Management

Security Operations

Incident Management

Cross-functional Collaboration

Education

Bachelor's Degree in IT/Cybersecurity/CS

Tools

PowerShell

Bash

Python

Job description

Specific Duties And Responsibilities

• Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements.
• Coordinate application onboarding activities to facilitate successful integration into enterprise security and compliance programs.
• Conduct and support physical site inspection activities to validate compliance with security standards and controls.
• Maintain compliance records and attestations to support audit readiness and regulatory reporting requirements.

Security Operations and Compliance Management

• Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements.
• Coordinate application onboarding activities to facilitate successful integration into enterprise security and compliance programs.
• Conduct and support physical site inspection activities to validate compliance with security standards and controls.
• Maintain compliance records and attestations to support audit readiness and regulatory reporting requirements.

Data Protection and Security Monitoring

• Operate enterprise data discovery and monitoring activities to identify and protect sensitive information across systems and applications.
• Analyze security scan results to validate findings and support risk identification and remediation efforts.
• Classify and assess sensitive data assets to ensure appropriate protection measures are applied.
• Troubleshoot security scan failures and operational issues to maintain monitoring effectiveness and compliance coverage.

Incident Management and Stakeholder Engagement

• Manage incidents, service requests, and escalation activities to ensure timely resolution of security-related concerns.
• Collaborate with technical and business stakeholders to drive remediation plans and improve security compliance outcomes.
• Communicate security findings, risks, and operational updates to stakeholders to support informed decision-making.

Process Improvement and Automation

• Develop and maintain scripts and automation solutions to improve operational efficiency and reduce manual effort.
• Identify opportunities for continuous improvement to enhance security operations, compliance processes, and service delivery effectiveness.

COMPETENCIES

Core Competencies (Must-have Competencies)

• Data Security and Sensitive Information Protection: Ability to identify, classify, monitor, and protect sensitive organizational data including PII, PCI, and PHI information in accordance with security policies and compliance requirements.
• PCI DSS Compliance Management: Ability to support PCI DSS compliance activities, application onboarding, control validation, and audit preparedness to maintain regulatory compliance.
• Security Operations and Incident Management: Ability to manage incidents, perform security triage, investigate issues, coordinate escalations, and facilitate timely resolution of operational security events.
• Systems, Database, and Infrastructure Security: Knowledge of operating systems, databases, application architecture, and network security concepts to support security analysis and risk mitigation activities.
• Security Automation and Scripting: Ability to utilize scripting and automation techniques to streamline recurring security operations and improve service efficiency.

Complementary Competencies (Good-to-have Competencies)

• Data Privacy and Regulatory Awareness: Understanding of data privacy regulations and governance frameworks including PIPEDA, Law 25, PHIPA, GDPR, data classification, retention, and safeguarding requirements.
• Testing and Deployment Support: Familiarity with UI testing, production validation activities, and CI/CD practices that support secure application delivery.
• Stakeholder Relationship Management: Ability to influence, communicate, and collaborate effectively with technical and business stakeholders, particularly in security and compliance-driven environments.

Qualifications

Educational Qualifications:

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Security, or a related discipline.

Preferred

• Cybersecurity, Information Assurance, or related specialization.
• Professional certifications such as: CIPT, CISSP, CEH, CompTIA Security+, ITIL Foundation, Cloud Security or Cloud Platform Certifications, PCI DSS-related certifications or training

Professional Qualifications

• Minimum 2 years of experience supporting cybersecurity, data security, compliance, or information protection functions.
• Minimum 2 years of experience administering or supporting Linux and Windows environments.
• Minimum 2 years of experience utilizing PowerShell, Bash, Python, or similar scripting technologies.
• Experience managing incidents, requests, and operational workflows within IT Service Management environments.
• Experience supporting security monitoring, vulnerability identification, or data discovery activities
• Experience working with database technologies including Oracle, Microsoft SQL Server, DB2, PostgreSQL, or MySQL.
• Knowledge of application architecture, web security concepts, and network security fundamentals.
• Understanding of PCI DSS compliance principles and security control implementation.
• Experience collaborating with cross-functional technical teams to drive remediation and operational improvements.

Work Conditions

• Work Schedule: Monday to Friday, Golden Hours (4PM-1AM Manila)
• Location: NQX Philippines