SPECIFIC DUTIES AND RESPONSIBILITIES
Security Operations and Compliance Management
- Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements.
- Coordinate application onboarding activities to facilitate successful integration into enterprise security and compliance programs.
- Conduct and support physical site inspection activities to validate compliance with security standards and controls.
- Maintain compliance records and attestations to support audit readiness and regulatory reporting requirements.
Data Protection and Security Monitoring
- Operate enterprise data discovery and monitoring activities to identify and protect sensitive information across systems and applications.
- Analyze security scan results to validate findings and support risk identification and remediation efforts.
- Classify and assess sensitive data assets to ensure appropriate protection measures are applied.
- Troubleshoot security scan failures and operational issues to maintain monitoring effectiveness and compliance coverage.
Incident Management and Stakeholder Engagement
- Manage incidents, service requests, and escalation activities to ensure timely resolution of security-related concerns.
- Collaborate with technical and business stakeholders to drive remediation plans and improve security compliance outcomes.
- Communicate security findings, risks, and operational updates to stakeholders to support informed decision-making.
Process Improvement and Automation
- Develop and maintain scripts and automation solutions to improve operational efficiency and reduce manual effort.
- Identify opportunities for continuous improvement to enhance security operations, compliance processes, and service delivery effectiveness.
COMPETENCIES
Core Competencies (Must-have Competencies)
- Data Security and Sensitive Information Protection: Ability to identify, classify, monitor, and protect sensitive organizational data including PII, PCI, and PHI information in accordance with security policies and compliance requirements.
- PCI DSS Compliance Management: Ability to support PCI DSS compliance activities, application onboarding, control validation, and audit preparedness to maintain regulatory compliance.
- Security Operations and Incident Management: Ability to manage incidents, perform security triage, investigate issues, coordinate escalations, and facilitate timely resolution of operational security events.
- Systems, Database, and Infrastructure Security: Knowledge of operating systems, databases, application architecture, and network security concepts to support security analysis and risk mitigation activities.
- Security Automation and Scripting: Ability to utilize scripting and automation techniques to streamline recurring security operations and improve service efficiency.
Complementary Competencies (Good-to-have Competencies)
- Data Privacy and Regulatory Awareness: Understanding of data privacy regulations and governance frameworks including PIPEDA, Law 25, PHIPA, GDPR, data classification, retention, and safeguarding requirements.
- Testing and Deployment Support: Familiarity with UI testing, production validation activities, and CI/CD practices that support secure application delivery.
- Stakeholder Relationship Management: Ability to influence, communicate, and collaborate effectively with technical and business stakeholders, particularly in security and compliance-driven environments.
QUALIFICATIONS
Educational Qualifications:
- Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Security, or a related discipline.
Preferred:
- Cybersecurity, Information Assurance, or related specialization.
- Professional certifications such as: CIPT, CISSP, CEH, CompTIA Security+, ITIL Foundation, Cloud Security or Cloud Platform Certifications, PCI DSS-related certifications or training
Professional Qualifications
- Minimum 2 years of experience supporting cybersecurity, data security, compliance, or information protection functions.
- Minimum 2 years of experience administering or supporting Linux and Windows environments.
- Minimum 2 years of experience utilizing PowerShell, Bash, Python, or similar scripting technologies.
- Experience managing incidents, requests, and operational workflows within IT Service Management environments.
- Experience supporting security monitoring, vulnerability identification, or data discovery activities
- Experience working with database technologies including Oracle, Microsoft SQL Server, DB2, PostgreSQL, or MySQL.
- Knowledge of application architecture, web security concepts, and network security fundamentals.
- Understanding of PCI DSS compliance principles and security control implementation.
- Experience collaborating with cross-functional technical teams to drive remediation and operational improvements.
Work Conditions
- Work Schedule: Monday to Friday, Golden Hours (4PM-1AM Manila)
- Location: NQX Philippines
2+ years supporting cybersecurity, data protection, compliance, Linux/Windows administration, scripting (PowerShell/Bash/Python), and security monitoring; bachelor's degree in IT or related field preferred.
Key Responsibilities
- managing incidents
- monitoring data
- ensuring compliance
Skills & Tools
PowerShell, Bash, Python, Oracle, Microsoft SQL Server, DB2, PostgreSQL, MySQL
Job Details
- Category: Information Technology
- Seniority: Entry Level
- Commitment: Full Time
- Workplace: Remote — Manila, Metro Manila, Philippines
- Languages: English
About Quantrics
A company providing data security, compliance, and protection services for enterprise applications. — Industry: Information Technology