Information Security Officer - Nairobi

About the role

Teleperformance is looking for an Information Security professional in Nairobi to share ownership of security incident management across the Sub-Saharan Africa region with the Director – Information Security. The role covers incident response, investigations, compliance and audit support, and also physical security management after onboarding.

Key responsibilities

• Share ownership of security incident management, coordinating response under incident response procedures (declaration, containment, reporting, recovery, post-incident review)
• Support investigations of incidents, events and weaknesses, including root cause analysis, evidence handling and documentation, and corrective action planning
• Work with the Operations Security Manager on CCR evidence coordination, Security Risk Assessments (SRA), security exceptions and GISP compliance
• Prepare for internal, external and client audits (e.g. ISO 27001, PCI DSS) and track findings to closure
• After onboarding, support physical security with Facilities Management: badge and visitor access, clean desk policy and security guard compliance audits
• Act as liaison between local business units and the subsidiary audit team, and build relationships across Operations, HR, IT and Facilities
• Support security awareness training and identify and mitigate compliance and security risks proactively

Required profile

• Bachelor's degree in information technology, computer science, administration management or equivalent
• Minimum 2 years of progressive experience in information security compliance, data protection, security audit and risk management, physical security or an investigative role
• Foundational knowledge of information security principles and frameworks (e.g. ISO 27001, PCI DSS)
• Exposure to physical security operations such as access control, badge and visitor management, or site security compliance
• Investigative or analytical skills, demonstrated through incident investigation or root cause analysis
• Willingness to work on-call during breaches or emergencies and to adapt to fast pace and changing priorities
• Preferred certifications: CC, ISO/IEC 27001 Foundation, CompTIA Security+, ASIS PSP, PCI or CFE