Senior Physical Security Manager

Topstep•Chicago, IL

2d•$160,000 - $180,000•Hybrid

About The Position

As the Physical Security Manager, you will be the foundational lead for our physical protection strategy. We are looking for a builder who can transition our current informal processes into a robust, scalable, and technology-driven security program. You will own the entire lifecycle of physical security—from conducting initial risk assessments and selecting vendors to implementing enterprise-grade access control systems and fostering a culture of safety across our multi-city footprint.

Requirements

8 + years of progressive experience in corporate security management, with a demonstrable track record of building and scaling physical security programs from "ground zero" in high-growth technology or financial services environments.
Expert-level proficiency in selecting, procuring, and implementing enterprise-grade, cloud-native Access Control (ACS) and Video Management Systems (VMS), specifically integrating these with HRIS and Identity Providers.
Deep experience navigating physical security audits for SOC2 Type II, PCI-DSS, or ISO 27001, ensuring all physical controls are documented, tested, and evidence-ready.
Mastery of threat assessment methodologies to conduct Executive Team (ET) risk profiles, residential assessments, and bespoke protection plans for high-profile leadership.
Ability to design and facilitate sophisticated tabletop exercises and emergency response simulations for senior leadership, bridging the gap between physical safety and business continuity.
Sophisticated negotiation and management skills for third-party service providers, including global security integrators and contract guarding services, with a focus on Zero-Trust physical access models.
Exceptional "soft skills" with the ability to build a security-first culture without introducing unnecessary friction; able to translate complex physical risks into business-impact language for C-Suite stakeholders.
Proficient in establishing Key Performance Indicators (KPIs) and security metrics to provide the board with transparent reporting on program ROI and site vulnerability trends.
A self-starter who thrives in "immature" program environments, possessing the agility to pivot from high-level strategic planning to on-site technical troubleshooting.
Unwavering commitment to confidentiality and ethical conduct, particularly when handling sensitive information regarding Executive Team safety and proprietary fintech IP.
A preference for modern, frictionless security solutions over traditional, bureaucratic "gatekeeping" models environments.

Nice To Haves

Willingness and ability to travel once per quarter for team meetings, trainings, or business needs.

Responsibilities

Select and project-manage the deployment of a unified, cloud-based Access Control (ACS) and Visitor Management System (VMS) across all 5 offices.
Conduct comprehensive Physical Security Risk Assessments (PSRA) for all sites.
Identify vulnerabilities and implement physical hardening measures (ballistic glass, reinforced entries, etc.).
Author and maintain all Emergency Action Plans (EAPs).
Lead tabletop exercises and floor warden training for fire, life safety, and active threat scenarios.
Design and enforce protocols to secure and destroy, at end of life, Sensitive Proprietary Information and IT Hardware.
Develop and launch an Anti-Tailgating Awareness Program.
Transition the company culture from "passive politeness" to "active security" through training and social engineering testing.
Conduct bespoke Threat Assessments for Executive Team (ET) members, evaluating their public-facing risk profiles, residential security, and travel safety.