Require an Information Security in Nairobi, Kenya

• Partner with the Director Information Security Sub-Saharan Africa in the shared ownership of security incident management across the Sub-Saharan Africa region coordinating response activities under Teleperformances incident response procedures including incident declaration containment coordination reporting recovery and post-incident review.
  
• Support the investigation of security incidents events and weaknesses conducting root cause analysis evidence handling and documentation in line with policy and assist in corrective action planning to prevent recurrence.
  
• Work in partnership with the Operations Security Manager (OSM) Sub-Saharan Africa on the joint delivery of CCR evidence coordination and submission Security Risk Assessments (SRA) planning execution and reporting and security exceptions management; sharing ownership of these processes and building cross-capability across the team.
  
• Contribute to GISP compliance activities as a shared team responsibility coordinating evidence gathering and reporting through the relevant internal security platforms and tools.
  
• Support internal external and client audit and security assessment preparation including the collection validation and timely submission of required evidence to auditors and assessment teams.
  
• Track audit findings and remediation actions through to closure coordinating with process owners and reporting progress to the Director Information Security Sub- Saharan Africa.
  
• Following onboarding and ramp-up support physical security management in coordination with Facilities Management including oversight of identity badge and visitor access governance physical access exceptions clean desk policy enforcement and security guard compliance audits.
  
• Assist in periodic Security Risk Assessments (SRA) in accordance with ISO 27001 and client security requirements providing comprehensive reporting to relevant stakeholders and driving continuous improvement efforts.
  
• Serve as the liaison between local business units and the subsidiary audit team coordinating internal and external audit activities (e.g. ISO 27001 PCI DSS) and facilitating evidence collection and submission.
  
• Develop and maintain consultative relationships across departments (Operations HR IT Facilities) to promote adherence to company risk management frameworks exception processes and regulatory standards.
  
• Promote organisation-wide security awareness by supporting the development and delivery of education training and debriefing sessions on security-related matters.
  
• Drive proactive identification and mitigation of compliance and security risks during local projects initiatives and operational activities applying investigative and analytical judgement to emerging issues.
  
• Collaborate with cross-functional teams to collect feedback and improve the effectiveness of security systems documentation and key performance indicators related to the security posture.
  
• Perform additional job-related duties as assigned in Information Security and Operational Security.
  

• Bachelors degree in information technology Computer Science Administration Management or equivalent.
  
• Foundational knowledge of information security principles and frameworks (e.g. ISO 27001 PCI DSS) and familiarity with regulations and standards related to information security and data protection.
  
• Exposure to physical security operations such as access control systems badge and visitor management contractor and guard oversight or site security compliance.
  
• Investigative or analytical skills demonstrated through incident investigation root cause analysis evidence handling fraud examination or similar investigative work.
  
• Preferably holding or working towards one of the following certifications: Certified in Cybersecurity (CC) ISO/IEC 27001 Foundation CompTIA Security ASIS Physical Security Professional (PSP) or Professional Certified Investigator (PCI) or ACFE Certified Fraud Examiner (CFE).
  

Total Experience & Relevant Experience

• Minimum 2 years of progressive professional experience in Information Security compliance data protection security audit and risk management physical security operations or an investigative or analytical role.
  
• Can easily transition to a fast-paced environment and must be able to learn new concepts quickly that affect the security posture of the company.
  
• Willingness to work on-call in the event of a security breach or other emergency. Perform effectively despite sudden deadlines and changing priorities.