Data Security Specialist II

Gtatelecom; Philadelphia (Philadelphia County); On-site; USD 100,000 - 150,000; Full time

Job summary

Gtatelecom is seeking a Data Security Specialist to safeguard enterprise data while driving security, risk, and compliance initiatives. You’ll collaborate with a cybersecurity team to enforce security policies, proactively identify vulnerabilities, and ensure strict adherence to PCI standards.

You’ll be instrumental in managing risk, preparing for audits, and performing technical analyses, all within a dynamic, team-oriented atmosphere.

Qualifications

• 3–5 years of IT and information security experience (security, systems analysis, app development, DB administration).
• 3–4 years of experience in information security, risk, and compliance.
• Strong hands-on knowledge of PCI compliance (certification a plus).
• Understanding of credit card processing regulations and technology footprints across cloud/servers.
• Ability to write and analyze SQL queries for security and audit purposes.
• Experience tracking and remediating vulnerabilities with system owners and stakeholders.
• Comfort managing large datasets (20K+ assets).
• Experience with industry security tools such as CrowdStrike.

Responsibilities

• Plan, design, and enforce enterprise data security policies and procedures.
• Audit and assess PCI compliance regulations, track issues, and coordinate remediation.
• Analyze technical configurations, run security queries, and report findings.
• Liaise with system owners and facilitate audit meetings to gather evidence.
• Review and document evidence for annual attestations and submit for audit review.
• Maintain awareness of evolving security technologies and recommend adaptations.

Skills

IT security experience

PCI knowledge

SQL querying

Vulnerability management

Asset management

Security tools

Tools

CrowdStrike

Job description

Take on a key role as a Data Security Specialist where you’ll help safeguard enterprise systems and data while driving security, risk, and compliance initiatives. In this position, you’ll collaborate with a dedicated cybersecurity team to develop and enforce security policies, proactively identify vulnerabilities, and ensure strict adherence to Payment Card Industry (PCI) standards. You’ll be instrumental in managing risk, preparing for audits, and performing technical analyses, all within a dynamic, team-oriented atmosphere.

Required Skills & Experience

• 3–5 years’ experience in IT and information security roles (including systems analysis, app development, database administration)
• 3–4 years’ experience with information security, risk, and compliance
• Strong hands-on knowledge of PCI compliance (certification a plus)
• Understanding of credit card processing regulations and technology footprints across cloud/servers
• Ability to write and analyze SQL queries for security and audit purposes
• Experience tracking and remediating vulnerabilities with system owners and stakeholders
• Comfort managing large datasets (20K+ assets)
• Experience with industry security tools (CrowdStrike or similar security technology)

Desired Mindset & Skills

• Proactive, results-driven attitude, aiming for spotless compliance reports
• Strong communication, able to facilitate audits and collaborate with internal/external stakeholders
• Experience with evidence review and documentation submission for audits

What You Will Be Doing

Tech Breakdown

• 40% Security policy enforcement, incident response, vulnerability tracking
• 30% PCI compliance audits, evidence review, documentation submission
• 20% Technical analysis, SQL querying, support of in-house security tools
• 10% Stakeholder communication and collaboration

Daily Responsibilities

• Plan, design, and enforce enterprise data security policies and procedures
• Audit and assess compliance with PCI regulations, track issues and coordinate remediation
• Analyze technical configurations, run security queries, and report findings
• Liaise with system owners and facilitate audit meetings
• Review and document evidence for annual attestations and submit for audit review
• Maintain awareness of evolving security technologies and recommend adaptions