Security Incident Analyst

The Security Incident Analyst will serve as a central triage and referral function for incident reporting across the entire DRC mission. The role aims to reduce the volume of raw incident reports sent directly to the Security Directorate, improve the quality and consistency of the incident communication chain, and ensure that incidents are directed to the appropriate focal point based on severity, nature, and required action. This position will work closely with the Country Manager of Security & Safety Operations to support a more structured incident management system and strengthen communication flow between field sites, country management, and the region.

1. Conduct first-line review and triage of all incident reports received from field sites. Classify incidents by severity, urgency, location, and thematic category. Route incidents to the appropriate function: security, operations, programs, HR, protection, compliance, or the security department. Ensure the immediate escalation of critical incidents to the appropriate decision-makers. Support the security structure with organized incident tracking, trend analysis, and follow-up. Improve reporting discipline and propose corrective actions as needed. Contribute to periodic country security analysis by consolidating incident data and lessons learned. Take creative initiatives to improve security incident management. SCOPE The role covers all reported incidents affecting personnel, assets, premises, programs, travel, community relations, access, and operational continuity across all mission bases. KEY RESPONSIBILITIES: INCIDENT RECEIPT AND REGISTER MANAGEMENT Receive incident reports from bases and other internal sources via agreed channels, including email, phone, WhatsApp, forms, or reporting templates. Log each incident in the centralized incident tracker within agreed timeframes.Verify that the minimum reporting information is captured: who, what, when, where, impact, immediate actions taken, and outstanding needs. Follow up with the reporting base or focal point when information is incomplete. SORTING AND CLASSIFICATION: Conduct first-level screening of all incident reports. Categorize incidents by type: security, access, crime, interaction with an armed actor, concern about staff misconduct, road traffic, operational disruption, community tension, premises issue, information or cyber concern. Assign a severity level according to the matrix: Level 1: Minor - incident manageable at the field level with routine notification. Level 2: Moderate - incident requiring notification to the country office and follow-up. Level 3: Serious - incident requiring immediate action at the country level and notification to management. Level 4: Critical - incident requiring immediate communication to the security directorate and possibly regional support. Apply referral protocols based on both the severity and nature of the incident. SHARING AND ROUTING In accordance with the incident reporting memo: Immediately communicate critical and serious incidents to the appropriate individuals. Route non-security incidents to the relevant functions, keeping security copied if necessary: ​​Program access constraints → programs and area management. Operational disruptions → operations/logistics. HR or staff welfare concerns → HR. Protection or fault concerns via appropriate confidential channels. Ensure field teams are aware of whether an incident is closed at the field level, escalated for country support, or referred to another department. INCIDENT QUALITY CONTROL Review reports for consistency, clarity, and usability. Standardize incident summaries before sharing if necessary. Ensure serious incidents are not delayed due to poor formatting or incomplete reporting. Promote the use of the agreed-upon incident reporting template and routing logic. ACTION TRACKING: Track actions arising from incidents until closure or handover. Maintain an active tracking matrix showing the incident owner, next step, due date, and current status. Remind focal points of overdue actions and unresolved recommendations. Report repeat incidents, overdue corrective actions, and unresolved structural issues to Gilbert and relevant managers. ANALYSIS AND REPORTING SUPPORT: Prepare weekly and/or bi-weekly incident reports for country management. Contribute to regular analysis sessions by consolidating incident patterns, hotspots, and recurring triggers.Compare reported incidents with external context sources, including INSO and other available analytical inputs. Identify trends related to under-reporting, over-reporting, recurring locations, recurring actors, and response bottlenecks. SYSTEM DEVELOPMENT AND PROCESS IMPROVEMENT: Assist in developing and maintaining the incident triage decision tree or mind map discussed at the meeting. Assist in defining the communication flow from the base to the country level and from the country to the region. Support the development or revision of SOPs, escalation matrices, and reporting templates. Train field focal points and base teams on reporting thresholds, timelines, and referral expectations. DELIVERABLES: Centralized incident log maintained and quality controlled. Finalized and used incident severity matrix and referral decision tree. Weekly or bi-weekly incident summary shared with designated management. Monthly analytical summary highlighting trends, lessons learned, and recurring issues. Updated Standard Operating Procedure or Quick Reference Guide for incident reporting and escalation. Filing system ready for transfer for incident records and action tracking. PROTECTION RESPONSIBILITIES: Actively learns about protection and integrates it into their work, including risk protection and mitigation measures relevant to their area of ​​work. Practices Mercy Corps values, including respect for the dignity and well-being of participants and other team members. Encourages openness and communication within their team; encourages team members to submit reports if they have concerns using reporting mechanisms, such as the Integrity Hotline and other options.Lessons learned and recurring issues. Updated Standard Operating Procedure or Quick Reference Guide for incident reporting and escalation. Transfer-ready filing system for incident records and action tracking. PROTECTION RESPONSIBILITIES: Actively learns about protection and integrates it into their work, including risk protection and mitigation measures relevant to their area of ​​work. Practices Mercy Corps values, including respect for the dignity and well-being of participants and other team members. Encourages openness and communication within their team; encourages team members to submit reports if they have concerns using reporting mechanisms, such as the Integrity Hotline and other options.Lessons learned and recurring issues. Updated Standard Operating Procedure or Quick Reference Guide for incident reporting and escalation. Transfer-ready filing system for incident records and action tracking. PROTECTION RESPONSIBILITIES: Actively learns about protection and integrates it into their work, including risk protection and mitigation measures relevant to their area of ​​work. Practices Mercy Corps values, including respect for the dignity and well-being of participants and other team members. Encourages openness and communication within their team; encourages team members to submit reports if they have concerns using reporting mechanisms, such as the Integrity Hotline and other options.

APPLY NOW