Senior Physical Security Manager

Summary: As the Physical Security Manager, you will be the foundational lead for our physical protection strategy. We are looking for a builder who can transition our current informal processes into a robust, scalable, and technology-driven security program. You will own the entire lifecycle of physical security—from conducting initial risk assessments and selecting vendors to implementing enterprise-grade access control systems and fostering a culture of safety across our multi-city footprint.

Key Responsibilities

System Implementation & Operationalization: Select and project-manage the deployment of a unified, cloud-based Access Control (ACS) and Visitor Management System (VMS) across all 5 offices. Hardening & Risk Assessment: Conduct comprehensive Physical Security Risk Assessments (PSRA) for all sites. ).

Emergency Preparedness: Author and maintain all Emergency Action Plans (EAPs). Lead tabletop exercises and floor warden training for fire, life safety, and active threat scenarios. Asset Protection & Disposal (Hardware & IP): Design and enforce protocols to secure and destroy, at end of life, Sensitive Proprietary Information and IT Hardware.

Security Culture & Awareness: Develop and launch an Anti-Tailgating Awareness Program. Transition the company culture from "passive politeness" to "active security" through training and social engineering testing. Executive Protection & Threat Assessment: Conduct bespoke Threat Assessments for Executive Team (ET) members, evaluating their public-facing risk profiles, residential security, and travel safety.

Required Qualifications

and Key Competencies 8 + years of progressive experience in corporate security management, with a demonstrable track record of building and scaling physical security programs from "ground zero" in high-growth technology or financial services environments. Expert-level proficiency in selecting, procuring, and implementing enterprise-grade, cloud-native Access Control (ACS) and Video Management Systems (VMS), specifically integrating these with HRIS and Identity Providers. Deep experience navigating physical security audits for SOC2 Type II, PCI-DSS, or ISO 27001, ensuring all physical controls are documented, tested, and evidence-ready.

Mastery of threat assessment methodologies to conduct Executive Team (ET) risk profiles, residential assessments, and bespoke protection plans for high-profile leadership. Ability to design and facilitate sophisticated tabletop exercises and emergency response simulations for senior leadership, bridging the gap between physical safety and business continuity. Sophisticated negotiation and management skills for third-party service providers, including global security integrators and contract guarding services, with a focus on Zero-Trust physical access models.

Influential Communication: Exceptional "soft skills" with the ability to build a security-first culture without introducing unnecessary friction; able to translate complex physical risks into business-impact language for C-Suite stakeholders. Proficient in establishing Key Performance Indicators (KPIs) and security metrics to provide the board with transparent reporting on program ROI and site vulnerability trends. A self-starter who thrives in "immature" program environments, possessing the agility to pivot from high-level strategic planning to on-site technical troubleshooting.

Unwavering commitment to confidentiality and ethical conduct, particularly when handling sensitive information regarding Executive Team safety and proprietary fintech IP. A preference for modern, frictionless security solutions over traditional, bureaucratic "gatekeeping" models environments. Willingness and ability to travel once per quarter for team meetings, trainings, or business needs.

Perks

Topstep is an engaging working environment that ranges from fully remote t