Data Security Analyst

Paymentus Group Inc•Richmond Hill, ON

1d•CA$83,000 - CA$105,000•Onsite

About The Position

Paymentus is seeking a Data Security Analyst to join our Cyber Security team with a focus on Data Loss Prevention (DLP). This role will support the day-to-day operation of the organization's DLP program by monitoring alerts, investigating incidents, maintaining policies, and helping protect sensitive data across cloud, endpoint, email, and SaaS environments. The ideal candidate is eager to grow their cybersecurity skills and enjoys solving technical problems while working with a collaborative security team.

Requirements

1–3 years of experience in Cybersecurity, Information Security, IT Operations, or a related technical role.
Basic understanding of Data Loss Prevention (DLP) concepts and data protection principles.
Familiarity with cloud and SaaS environments (Google Workspace, AWS, Azure, etc.).
Experience working with security technologies such as email security, endpoint security, or similar tools.
Strong troubleshooting and analytical skills.
Excellent written and verbal communication skills.
Strong interest in cybersecurity and data protection.
Detail-oriented with strong organizational skills.
Excellent analytical and problem-solving abilities.
Eager to learn new technologies and security concepts.
Able to manage multiple priorities in a fast-paced environment.
Strong communication and collaboration skills.
Self-motivated with a proactive approach to continuous learning.
Demonstrates an automation mindset and seeks opportunities to improve operational efficiency.

Nice To Haves

Experience with DLP technologies such as Cyberhaven, Microsoft Purview, Proofpoint, Symantec, or similar solutions.
Basic scripting or automation experience (PowerShell, Python, Bash, or similar).
Familiarity with Microsoft 365 or Google Workspace administration.
Basic understanding of identity and access management concepts (e.g., Okta or Microsoft Entra ID).
Knowledge of compliance frameworks such as PCI-DSS, SOC 2, GDPR, or ISO 27001.
Security+, SC-900, AZ-900, or similar entry-level security certifications.

Responsibilities

Monitor and investigate DLP alerts and potential data security incidents.
Assist with tuning DLP policies to improve detection accuracy and reduce false positives.
Support the protection of sensitive data across endpoints, email, cloud, and SaaS applications.
Document investigation findings and escalate complex incidents when necessary.
Maintain DLP documentation, playbooks, and operational procedures.
Track and report DLP metrics, trends, and recurring issues.
Assist users with DLP-related questions and policy guidance.
Work with Security Operations to investigate data security events.
Help identify root causes of DLP incidents and recommend improvements.
Assist with testing new DLP policies before production deployment.
Support troubleshooting of DLP tools and policy issues.
Participate in incident response activities involving data security events.
Assist with basic scripting and automation to improve reporting and operational efficiency.
Help integrate DLP alerts into existing security workflows.
Support ongoing maintenance and optimization of DLP technologies.
Support compliance initiatives including PCI-DSS, SOC 2, GDPR, and other applicable regulations.
Assist with audit requests by gathering evidence and documentation.
Help maintain data protection standards, documentation, and operational procedures.
Follow established data handling and security best practices.
Work with Engineering, IT, Product, HR, Legal, and business teams to support secure handling of sensitive information.
Participate in security awareness initiatives related to data protection.
Stay current on emerging threats and best practices related to DLP and data protection.
Contribute to continuous improvements in the organization's data security program.