Security and Compliance Coordinator

JOB SUMMARY

The Security Compliance & Operations Coordinator supports the day-to-day physical security, compliance, and business continuity activities for the facility. This is a hands-on individual-contributor role responsible for supporting logical and cryptographic key-management and encryption activities, coordinating security vendors, completing required inspections, supporting audits, maintaining the Business Continuity Plan, and keeping assigned security policies and procedures current. The position works under the direction of the Director of Security and coordinates with internal departments and outside service providers.

This position has no direct supervisory responsibility.

• Coordinate and maintain logical and cryptographic key-management activities, including encryption-key administration, required key-management records, key custodian documentation, key ceremonies or related activities, and compliance with established procedures and applicable customer/payment-network requirements
• Maintain required key custodian and key-management documentation, including custodian assignments, annual vetting, training, acknowledgements, access/authorization records, and periodic reviews
• Support logical key and encryption-related compliance activities with payment networks, customers, and other authorized parties, including required security-officer or representative administration, documentation, periodic reviews, and coordination of changes under the direction of the Director of Security
• Serve as the day-to-day coordinator for physical security vendors supporting access control, CCTV/video surveillance, intrusion detection, alarms, intercom/duress systems, locksmith/keying services, and other security systems
• Coordinate vendor service calls, preventive maintenance, repairs, testing, documentation, and follow-up on open security-system issues
• Schedule, coordinate, and document required quarterly, semi-annual, annual, and other periodic physical security inspections and testing required by PCI, GSMA, ISO, NASPO, SOC, customer programs, or internal procedures
• Maintain inspection reports, service records, certificates, test results, work orders, and supporting compliance evidence in an organized and audit-ready manner
• Maintain the security compliance calendar and track recurring inspections, reviews, testing, evidence requests, and remediation due dates
• Conduct routine physical security inspections of secure areas, vaults, doors, locks, access-control devices, alarms, cameras, perimeter controls, visitor controls, and other security safeguards
• Document identified security issues and assist with tracking corrective actions through completion; elevate overdue or significant issues to the Director of Security
• Support internal, customer, certification, and third-party security audits by gathering evidence, coordinating walkthroughs, responding to requests, and tracking assigned follow-up items
• Review access-control records, security logs, alarm activity, logical/cryptographic key-management records, visitor records, and other assigned documentation for completeness and potential exceptions
• Coordinate periodic access reviews and other required security-control reviews with responsible departments
• Maintain the site Business Continuity Plan (BCP), including contact lists, assigned procedures, recovery information, and supporting documentation
• Coordinate and support Business Continuity tabletop exercises, including scheduling, participant coordination, exercise materials, documentation, action items, and follow-up
• Track lessons learned and corrective actions from tabletop exercises or actual business disruptions and assist with keeping BCP information current
• Maintain assigned security, business continuity, and related policies and procedures; review and update them as needed and at least annually to reflect current requirements and site practices
• Support security incident documentation and follow-up, including collection of relevant records, video, access data, and vendor information as directed
• Work with Facilities, IT, Operations, Quality, HR, Internal Audit, and other departments on assigned security and compliance activities
• Support security awareness activities and employee communication related to physical security procedures, key control, access requirements, and compliance responsibilities
• Prepare security compliance reports, inspection summaries, open-item trackers, and other routine management updates as requested
• Be flexible with work hours when required to support multi-shift operations, vendor activity, inspections, audits, incidents, or urgent security-system issues
• Perform other security, compliance, and operational duties as assigned by the Director of Security

This job description does not state or imply that these are the only duties to be performed by the employee occupying this position. The employee may be required to perform other job-related duties as…