Investigations Analyst - Information Security

About the role

Teleperformance is looking for an Investigations Analyst in Nairobi to partner with the Director – Information Security, Sub-Saharan Africa, in the shared ownership of security incident management across the region. The role covers incident response, investigations, audit support and physical security coordination.

Key responsibilities

• Coordinate security incident response (declaration, containment, reporting, recovery, post-incident review) and investigate incidents, events and weaknesses, including root cause analysis and evidence handling.
• Work with the Operations Security Manager on CCR evidence coordination, Security Risk Assessments (SRA), security exceptions and GISP compliance.
• Support internal, external and client audit and assessment preparation, track findings and remediation to closure, and liaise with the subsidiary audit team on ISO 27001, PCI DSS and other audits.
• After onboarding, support physical security management with Facilities Management, including badge and visitor access governance, clean desk policy and guard compliance audits.
• Contribute to ISO 27001 SRAs, build relationships across Operations, HR, IT and Facilities, and deliver security awareness training.
• Identify and mitigate compliance and security risks proactively, and perform additional duties as assigned.

Required profile

• Bachelor's degree in information technology, computer science, administration management or equivalent.
• Minimum 2 years of progressive experience in information security compliance, data protection, security audit and risk management, physical security or an investigative role.
• Foundational knowledge of information security principles and frameworks (e.g. ISO 27001, PCI DSS).
• Exposure to physical security operations such as access control, badge and visitor management, or site security compliance.
• Investigative or analytical skills, such as incident investigation, root cause analysis or fraud examination.
• Willingness to work on-call during breaches or emergencies and adapt to fast pace and changing priorities.
• Preferred certifications: CC, ISO/IEC 27001 Foundation, CompTIA Security+, ASIS PSP, PCI or CFE.