Require an Information Security in Nairobi, Kenya

• Partner with the Director – Information Security, Sub-Saharan Africa, in the shared ownership of security incident management across the Sub-Saharan Africa region, coordinating response activities under Teleperformance’s incident response procedures, including incident declaration, containment coordination, reporting, recovery and post-incident review.
  
• Support the investigation of security incidents, events and weaknesses, conducting root cause analysis, evidence handling and documentation in line with policy, and assist in corrective action planning to prevent recurrence.
  
• Work in partnership with the Operations Security Manager (OSM), Sub-Saharan Africa, on the joint delivery of CCR evidence coordination and submission, Security Risk Assessments (SRA) planning, execution and reporting, and security exceptions management; sharing ownership of these processes and building cross-capability across the team.
  
• Contribute to GISP compliance activities as a shared team responsibility, coordinating evidence gathering and reporting through the relevant internal security platforms and tools.
  
• Support internal, external and client audit and security assessment preparation, including the collection, validation and timely submission of required evidence to auditors and assessment teams.
  
• Track audit findings and remediation actions through to closure, coordinating with process owners and reporting progress to the Director – Information Security, Sub- Saharan Africa.
  
• Following onboarding and ramp-up, support physical security management in coordination with Facilities Management, including oversight of identity badge and visitor access governance, physical access exceptions, clean desk policy enforcement and security guard compliance audits.
  
• Assist in periodic Security Risk Assessments (SRA) in accordance with ISO 27001 and client security requirements, providing comprehensive reporting to relevant stakeholders and driving continuous improvement efforts.
  
• Serve as the liaison between local business units and the subsidiary audit team, coordinating internal and external audit activities (e.g. ISO 27001, PCI DSS) and facilitating evidence collection and submission.
  
• Develop and maintain consultative relationships across departments (Operations, HR, IT, Facilities) to promote adherence to company risk management frameworks, exception processes and regulatory standards.
  
• Promote organisation-wide security awareness by supporting the development and delivery of education, training and debriefing sessions on security-related matters.
  
• Drive proactive identification and mitigation of compliance and security risks during local projects, initiatives and operational activities, applying investigative and analytical judgement to emerging issues.
  
• Collaborate with cross-functional teams to collect feedback and improve the effectiveness of security systems, documentation and key performance indicators related to the security posture.
  
• Perform additional job-related duties as assigned in Information Security and Operational Security.
  

Requirements

• Bachelor’s degree in information technology, Computer Science, Administration Management or equivalent.
  
• Foundational knowledge of information security principles and frameworks (e.g. ISO 27001, PCI DSS) and familiarity with regulations and standards related to information security and data protection.
  
• Exposure to physical security operations, such as access control systems, badge and visitor management, contractor and guard oversight, or site security compliance.
  
• Investigative or analytical skills demonstrated through incident investigation, root cause analysis, evidence handling, fraud examination or similar investigative work.
  
• Preferably holding or working towards one of the following certifications: Certified in Cybersecurity (CC), ISO/IEC 27001 Foundation, CompTIA Security+, ASIS Physical Security Professional (PSP) or Professional Certified Investigator (PCI), or ACFE Certified Fraud Examiner (CFE).
  

Total Experience & Relevant Experience

• Minimum 2 years of progressive professional experience in Information Security compliance, data protection, security audit and risk management, physical security operations, or an investigative or analytical role.
  
• Can easily transition to a fast-paced environment and must be able to learn new concepts quickly that affect the security posture of the company.
  
• Willingness to work on-call in the event of a security breach or other emergency. Perform effectively despite sudden deadlines and changing priorities.