Information Security & Investigations Analyst TP Kenya

Key responsibilities

• Partner with the Director – Information Security, Sub-Saharan Africa, in the shared ownership of security incident management across the Sub-Saharan Africa region, coordinating response activities under Teleperformance’ s incident response procedures, including incident declaration, containment coordination, reporting, recovery and post-incident review.
• Support the investigation of security incidents, events and weaknesses, conducting root cause analysis, evidence handling and documentation in line with policy, and assist in corrective action planning to prevent recurrence.
• Work in partnership with the Operations Security Manager (OSM), Sub-Saharan Africa, on the joint delivery of CCR evidence coordination and submission, Security Risk Assessments (SRA) planning, execution and reporting, and security exceptions management; sharing ownership of these processes and building cross-capability across the team.
• Contribute to GISP compliance activities as a shared team responsibility, coordinating evidence gathering and reporting through the relevant internal security platforms and tools.
• Support internal, external and client audit and security assessment preparation, including the collection, validation and timely submission of required evidence to auditors and assessment teams.
• Track audit findings and remediation actions through to closure, coordinating with process owners and reporting progress to the Director – Information Security, Sub- Saharan Africa.
• Following onboarding and ramp-up, support physical security management in coordination with Facilities Management, including oversight of identity badge and visitor access governance, physical access exceptions, clean desk policy enforcement and security guard compliance audits.
• Assist in periodic Security Risk Assessments (SRA) in accordance with ISO 27001 and client security requirements, providing comprehensive reporting to relevant stakeholders and driving continuous improvement efforts.
• Serve as the liaison between local business units and the subsidiary audit team, coordinating internal and external audit activities (e. g. ISO 27001, PCI DSS) and facilitating evidence collection and submission.
• Develop and maintain consultative relationships across departments (Operations, HR, IT, Facilities) to promote adherence to company risk management frameworks, exception processes and regulatory standards.
• Promote organisation-wide security awareness by supporting the development and delivery of education, training and debriefing sessions on security-related matters.
• Drive proactive identification and mitigation of compliance and security risks during local projects, initiatives and operational activities, applying investigative and analytical judgement to emerging issues.
• Collaborate with cross-functional teams to collect feedback and improve the effectiveness of security systems, documentation and key performance indicators related to the security posture.
• Perform additional job-related duties as assigned in Information Security and Operational Security.

Candidate requirements

• Location Nairobi
• Job Field Security / Intelligence &nbsp.
• As an Information Security & Investigations Analyst at TP Kenya, you will support the implementation, maintenance and continuous improvement of the Information Security Management System (ISMS) and Operational Security Management (OSM) at subsidiary level. Reporting to the Director – Information Security, Sub-Saharan Africa, your primary focus is security incident management, working in a shared-ownership arrangement with the Director to deliver incident management coverage across the Sub-Saharan Africa region.
• You will also partner with the Operations Security Manager (OSM), Sub-Saharan Africa, in the joint delivery of CCR evidence coordination, Security Risk Assessments (SRA) and security exceptions management, and will contribute to the team's GISP compliance activities as a shared responsibility of the whole Information Security function.
• Following onboarding and ramp-up, you will progressively support physical security management and other security workstreams, together with audit preparation and evidence support aligned to your performance objectives.
• You will collaborate cross-functionally with Operations, Facilities, HR and IT to uphold both corporate and client-specific security controls, enhancing the overall security posture of the organisation.

Required skills