Security Manager

Role overview

We are seeking a Security Manager to oversee physical security operations and PCI compliance at Modupay’s factory in Kenya. The role is responsible for maintaining strong security controls, meeting local regulatory expectations, and keeping the site ready for audits at all times.

Key responsibilities

• Run day-to-day physical security activities while ensuring PCI standards are consistently met across the Kenya factory.
• Maintain effective security coverage at entry and exit points, as well as within perimeter and internal areas.
• Verify visitor identities and prevent unauthorized movement of secure or restricted items through reception.
• Oversee CCTV monitoring, access control systems, and incident response documentation.
• Confirm that fire alarms, magnetic alarms, and PIR alarms remain functional and operational.
• Put in place standardized security procedures that can be aligned with local legal requirements.
• Carry out security risk assessments, drive corrective actions, and share practical security improvements.
• Investigate incidents such as theft, unauthorized access, and safety violations, then prepare reports for the MD and Regional Security Manager.
• Act as the main contact for external Qualified Security Assessors during audits for the Kenya factory.
• Lead country-level PCI compliance work, including gap analysis and evidence gathering to support adherence to PCI standards.
• Ensure that all systems, workflows, and staff handling cardholder data comply with PCI requirements.
• Keep a structured audit-readiness schedule and ensure it is maintained regularly.
• Track audit findings, close them within the required SLA, and update management on compliance progress.
• Deliver security awareness and PCI training to relevant teams.

Requirements

• A bachelor’s degree in law or police studies is required; PCI Professional (PCIP) certification is strongly preferred.
• Proven experience in PCI compliance and audit coordination.
• Strong background in risk assessment and mitigation.
• Ability to investigate incidents and prepare clear reports.
• Hands-on familiarity with CCTV and access control systems.
• Good stakeholder management skills.
• Experience in delivering training and awareness sessions.
• Fluency in both Swahili and English, spoken and written.
• 8 to 10 years of total experience, including 2 to 3 years of direct PCI compliance experience.
• Experience in a payment or fintech environment will be considered an advantage.

Additional information

This position is based in Nairobi County, Kenya and is a full-time onsite role.

No stipend or salary details were provided in the source.

No vacancy count, start date, or application deadline was specified.