Quantrics Enterprises Inc.
• SPECIFIC DUTIES AND RESPONSIBILITIES • Security Operations and Compliance Management • Support PCI DSS compliance initiatives to ensure business applications meet security and regulatory requirements. • Coordinate application onboarding activities to facilitate successful integration into enterprise security and compliance programs. • Conduct and support physical site inspection activities to validate compliance with security standards and controls. • Maintain compliance records and attestations to support audit readiness and regulatory reporting requirements. • Data Protection and Security Monitoring • Operate enterprise data discovery and monitoring activities to identify and protect sensitive information across systems and applications. • Analyze security scan results to validate findings and support risk identification and remediation efforts. • Classify and assess sensitive data assets to ensure appropriate protection measures are applied. • Troubleshoot security scan failures and operational issues to maintain monitoring effectiveness and compliance coverage. • Incident Management and Stakeholder Engagement • Manage incidents, service requests, and escalation activities to ensure timely resolution of security-related concerns. • Collaborate with technical and business stakeholders to drive remediation plans and improve security compliance outcomes. • Communicate security findings, risks, and operational updates to stakeholders to support informed decision-making. • Process Improvement and Automation • Develop and maintain scripts and automation solutions to improve operational efficiency and reduce manual effort. • Identify opportunities for continuous improvement to enhance security operations, compliance processes, and service delivery effectiveness. • COMPETENCIES • Core Competencies (Must-have Competencies) • Data Security and Sensitive Information Protection: Ability to identify, classify, monitor, and protect sensitive organizational data including PII, PCI, and PHI information in accordance with security policies and compliance requirements. • PCI DSS Compliance Management: Ability to support PCI DSS compliance activities, application onboarding, control validation, and audit preparedness to maintain regulatory compliance. • Security Operations and Incident Management: Ability to manage incidents, perform security triage, investigate issues, coordinate escalations, and facilitate timely resolution of operational security events. • Systems, Database, and Infrastructure Security: Knowledge of operating systems, databases, application architecture, and network security concepts to support security analysis and risk mitigation activities. • Security Automation and Scripting: Ability to utilize scripting and automation techniques to streamline recurring security operations and improve service efficiency. • Complementary Competencies (Good-to-have Competencies) • Data Privacy and Regulatory Awareness: Understanding of data privacy regulations and governance frameworks including PIPEDA, Law 25, PHIPA, GDPR, data classification, retention, and safeguarding requirements. • Testing and Deployment Support: Familiarity with UI testing, production validation activities, and CI/CD practices that support secure application delivery. • Stakeholder Relationship Management: Ability to influence, communicate, and collaborate effectively with technical and business stakeholders, particularly in security and compliance-driven environments. Qualifications • Educational Qualifications: • Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Security, or a related discipline. • Cybersecurity, Information Assurance, or related specialization. • Professional certifications such as: CIPT, CISSP, CEH, CompTIA Security+, ITIL Foundation, Cloud Security or Cloud Platform Certifications, PCI DSS-related certifications or training • Professional Qualifications • Minimum 2 years of experience supporting cybersecurity, data security, compliance, or information protection functions. • Minimum 2 years of experience administering or supporting Linux and Windows environments. • Minimum 2 years of experience utilizing PowerShell, Bash, Python, or similar scripting technologies. • Experience managing incidents, requests, and operational workflows within IT Service Management environments. • Experience supporting security monitoring, vulnerability identification, or data discovery activities • Experience working with database technologies including Oracle, Microsoft SQL Server, DB2, PostgreSQL, or MySQL. • Knowledge of application architecture, web security concepts, and network security fundamentals. • Understanding of PCI DSS compliance principles and security control implementation. • Experience collaborating with cross-functional technical teams to drive remediation and operational improvements. • Work Conditions • Work Schedule: Monday to Friday, Golden Hours (4PM-1AM Manila) • Location: NQX Philippines
Quantrics Enterprises Inc.
