Senior Physical Security Manager

Summary:

As the Physical Security Manager, you will be the foundational lead for our physical protection strategy. We are looking for a builder who can transition our current informal processes into a robust, scalable, and technology-driven security program. You will own the entire lifecycle of physical security—from conducting initial risk assessments and selecting vendors to implementing enterprise‑grade access control systems and fostering a culture of safety across our multi‑city footprint.

• System Implementation & Operationalization: Select and project‑manage the deployment of a unified, cloud‑based Access Control (ACS) and Visitor Management System (VMS) across all 5 offices.
• Hardening & Risk Assessment: Conduct comprehensive Physical Security Risk Assessments (PSRA) for all sites. Identify vulnerabilities and implement physical hardening measures (ballistic glass, reinforced entries, etc.).
• Emergency Preparedness: Author and maintain all Emergency Action Plans (EAPs). Lead tabletop exercises and floor warden training for fire, life safety, and active threat scenarios.
• Asset Protection & Disposal (Hardware & IP): Design and enforce protocols to secure and destroy, at end of life, Sensitive Proprietary Information and IT Hardware.
• Security Culture & Awareness: Develop and launch an Anti‑Tailgating Awareness Program. Transition the company culture from "passive politeness" to "active security" through training and social engineering testing.
• Executive Protection & Threat Assessment: Conduct bespoke Threat Assessments for Executive Team (ET) members, evaluating their public‑facing risk profiles, residential security, and travel safety.

• 8 + years of progressive experience in corporate security management, with a demonstrable track record of building and scaling physical security programs from "ground zero" in high‑growth technology or financial services environments.
• Expert‑level proficiency in selecting, procuring, and implementing enterprise‑grade, cloud‑native Access Control (ACS) and Video Management Systems (VMS), specifically integrating these with HRIS and Identity Providers.
• Deep experience navigating physical security audits for SOC2 Type II, PCI‑DSS, or ISO 27001, ensuring all physical controls are documented, tested, and evidence‑ready.
• Mastery of threat assessment methodologies to conduct Executive Team (ET) risk profiles, residential assessments, and bespoke protection plans for high‑profile leadership.
• Ability to design and facilitate sophisticated tabletop exercises and emergency response simulations for senior leadership, bridging the gap between physical safety and business continuity.
• Sophisticated negotiation and management skills for third‑party service providers, including global security integrators and contract guarding services, with a focus on Zero‑Trust physical access models.
• Influential Communication:
  Exceptional "soft skills" with the ability to build a security‑first culture without introducing unnecessary friction; able to translate complex physical risks into business‑impact language for C‑Suite stakeholders.
• Proficient in establishing Key Performance Indicators (KPIs) and security metrics to provide the board with transparent reporting on program ROI and site vulnerability trends.
• A self‑starter who thrives in "immature" program environments, possessing the agility to pivot from high‑level strategic planning to on‑site technical troubleshooting.
• Unwavering commitment to confidentiality and ethical conduct, particularly when handling sensitive information regarding Executive Team safety and proprietary fintech IP.
• A preference for modern, frictionless security solutions over traditional, bureaucratic "gatekeeping" models environments.
• Willingness and ability to travel once per quarter for team meetings, trainings, or business needs.

• Topstep is an engaging working environment that ranges from fully remote to hybrid. We foster a culture of collaboration by keeping cameras on during meetings and maintaining a robust Slack environment for communication.
• Seven Company‑paid Holidays and generous…