Information Security Analyst II (Mombasa)

As an Information Security Analyst II at Teleperformance Kenya, you will be responsible for implementing, maintaining, and continuously

improving the Information Security Management System (ISMS) and Operational Security Management (OSM) at the subsidiary level.

Working in close coordination with the Information Security Officer and the Operation Security Manager, you will also support

adherence to Contact Center Security Requirements, GISP Controls, and client contractual obligations. This role ensures compliance with

physical security protocols, incident investigations, operational risk support, and localized Security Risk Assessments (SRA). You will

collaborate cross-functionally with Operations, Facilities, HR, and IT to uphold both corporate and client-specific security controls,

enhancing the overall security posture of the organization.

• Support non-technical staff in understanding and applying Information Security policies and compliance requirements aligned with client contractual obligations and internal frameworks.

• Assist in periodic Security Risk Assessments (SRAs) in accordance with ISO 27001, GISP, and client security requirements; provide comprehensive reporting to relevant stakeholders and drive continuous improvement efforts.

• Serve as the liaison between local business units and the subsidiary audit team, coordinating internal and external audit activities (e.g. PCI-DSS, ISO 27001), facilitating the collection and submission of required evidence.

• Develop and maintain consultative relationships across departments (Operations, HR, IT, Facilities, etc.) to promote adherence to company risk management frameworks, exception processes, and regulatory standards.

• Provide expertise and recommendations to ensure business functions and processes meet or exceed security compliance standards (e.g. PCI-DSS, ISO 27001) and client-specific obligations.

• Coordinate the communication, evidence gathering, and reporting of GISP compliance requirements through relevant platforms such as Teleperformance Policy tools.

• Promote organization-wide security awareness by supporting the development and delivery of education, training, and debriefing sessions on security-related matters.

• Collaborate with cross-functional teams to collect feedback and improve the effectiveness of security systems, documentation, and KPIs related to the security posture.

• Facilitate investigation and root cause analysis of security incidents, assist in corrective action planning, and ensure thorough documentation in line with policy.

• Lead or support the implementation and periodic testing of business continuity processes within the local environment.

• Provide guidance and support on physical security compliance to ensure alignment with corporate and client standards.

• Drive proactive identification and mitigation of compliance and security risks during local projects, initiatives, and operational activities.

• Identify and champion process improvement opportunities and implement strategies to enhance the efficiency and resilience of security programs.

• Perform additional job-related duties as assigned in Information Security and Operational Security.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Administration Management or equivalent

• Minimum 2 years of progressive professional experience in Information Security compliance, data protection, security audit and risk management.

• Familiar with different regulations and standards related to information security and data protection (e.g., ISO27001, PCI DSS)

• Preferably a Certified in Cybersecurity (CC) certification, ISO/IEC 27001 Information Security

• Associate or Governance, Risk and Compliance Certification (CGRC)

We thank all applicants for their interest. However due to the large volume of applications we receive, only shortlisted candidates will be contacted.