Director, GSOC Operations, Travel Risk & Access Management

ServiceNow•Santa Clara, CA

7d•$184,000 - $253,100•Hybrid

About The Position

The Global Safety & Security (GSS) organization protects ServiceNow's people, assets, and brand globally. The Global Security Operations Center (GSOC) is the mission-critical hub delivering 24/7 monitoring, detection, and coordinated response to physical security events across the company. As a core pillar of GSS Global Operations, we are seeking a Director, GSOC Operations, Travel Risk & Access Management to lead and mature our global watch-floor operations and expand our capability into integrated travel risk monitoring and access identity management. Reporting to the Senior Director, Global Security Operations, you will lead day-to-day GSOC operations across U.S. and international locations, with expanded ownership of Travel Risk Management and Badging/Access Identity Management. You will own the 24/7 operating model — staffing, schedules, standards, and multi-domain response capability — and ensure consistent, high-quality monitoring, real-time threat response, and coordinated emergency notification. You will operate in close partnership with Global Investigations, Protection Services, Travel, Business Continuity Management, Facilities, and field operations to transform information into timely, coordinated, enterprise-wide action.

Requirements

10+ years in security operations, GSOC/SOC leadership, or command center management, including direct leadership of a 24/7 operations team and development of shift leads, watch officers, and analysts.
Demonstrated experience owning GSOC operating models across multiple sites or international regions — watch-floor staffing, scheduling, standards, alarm response, and emergency notification.
Proven experience in Travel Risk Management or corporate security operations — risk assessment, traveler monitoring, incident response, and stakeholder coordination.
Hands-on expertise in Badging, Physical Access Control, or Access Identity Management, including policy, operations, and emergency procedures.
Strong working knowledge of security monitoring platforms, access control systems, incident-management tools, and SIEM or SOC dashboards.
Proven ability to manage operating budgets, vendor relationships, SLAs, and performance reporting to senior leadership.
Demonstrated ability to manage shifting priorities, assess impact, and communicate clearly under time pressure during critical incidents.
Bachelor's degree in Security, Business, or related field, or equivalent experience; exceptional writing, analytical, and communication skills.

Nice To Haves

Experience building or scaling a GSOC or SOC operating model in a fast-paced, hyper-growth, or complex global organization.
Multi-disciplinary security background spanning operations, travel safety, crisis/emergency response, and access management.
Professionally recognized security certifications (e.g., CPP, PSP, ASIS, or equivalent) or advanced training in security operations.
Familiarity with ServiceNow platform and use of our security solutions, ITSM, or business applications.
Experience managing international operations, multi-site coordination, or distributed security teams across time zones.

Responsibilities

Lead round-the-clock watch-floor operations across U.S. and international locations, owning the operating model, shift schedules, staffing model, and shift leadership development.
Establish and maintain watch-floor standards, KPIs, and escalation procedures to ensure consistent, high-quality monitoring and incident response across all sites.
Manage staffing across GSOC functions to optimize coverage, surge capacity, and the case for dedicated regional capability (e.g., APAC GSOC expansion).
Own real-time monitoring, detection, and proactive response to physical security events, ensuring 24/7 employee support for incident reporting and security concerns.
Lead alarm response and investigation coordination across facilities to ensure timely threat mitigation and root-cause resolution.
Coordinate emergency response and critical incident notification protocols to protect employee safety and enable business continuity.
Direct employee travel safety operations, including pre-travel risk assessment, location-based monitoring, and real-time security advisories in partnership with the Travel and Health & Safety teams.
Establish and maintain travel risk intelligence feeds, escalation protocols, and traveler support procedures for high-risk regions and dynamic security situations.
Manage travel incident response workflows, including traveler extraction support, embassy coordination, and family/leadership notification during critical events.
Oversee badging and physical access control operations, ensuring credential lifecycle management, real-time access monitoring, and compliance with security policies across all facilities.
Establish badging standards, audit procedures, and emergency access controls (lockdowns, badge suspension, site-wide access revocation) to mitigate facility security risks.
Lead access management coordination during security incidents, ensuring rapid response to unauthorized access, badge compromise, or suspicious access patterns.
Continuously monitor global events and security feeds to assess operational risk and personnel safety implications, in close coordination with Global Investigations' intelligence capability.
Synthesize real-time intelligence from physical monitoring, access patterns, travel data, and external feeds into actionable threat assessments and leadership briefings.
Drive proactive security posture by identifying trends, emerging threats, and opportunities for operational hardening.
Develop, rehearse, and maintain GSOC standard operating procedures, incident playbooks, and escalation decision-trees across physical security, travel risk, and access management domains.
Lead after-action reviews and root-cause analysis following security events to identify process improvements and drive quality across all operations.
Establish and monitor KPIs for response time, incident resolution, traveler support, and access control effectiveness.
Shape the GSOC staffing model, including FTE vs. contract/vendor staff mix, and build the business case for regional expansion (APAC coverage, regional watch floors).
Manage vendor relationships and performance standards for monitoring services, guard-force coordination, and access control systems, including SLAs and KPI reporting.
Own the GSOC operating budget, forecasting, and cost optimization while maintaining service levels.
Partner with Global Technology to evaluate, deploy, and optimize security monitoring platforms, access control systems, and incident-management tools.
Drive automation and operational insight improvements to enhance detection, reduce alert fatigue, and improve analyst productivity.
Provide requirements feedback to ensure technology roadmap aligns with GSOC operational needs.
Maintain strong coordination with Event Security, Executive Protection, Business Continuity Management, Travel, and Physical Security Operations to ensure integrated, enterprise-wide response capability.
Collect, analyze, and disseminate operational information in a timely manner, and deliver regular GSOC performance reports, incident trend analysis, and leadership briefings.
Serve as escalation point and senior operational authority for all GSOC incidents, travel security events, and access control emergencies.