Director of Global Security

Role Purpose & Context

Role Summary

The Director of Global Security is responsible for defining and delivering our entire physical security strategy across all our properties, worldwide. You'll move beyond just managing incidents to proactively building resilience and defence into everything we do, from new building designs to daily operations. This means thinking big picture—multi-year plans, significant budget decisions, and ensuring our security posture truly supports the business. When this role is done well, we're not just reacting to threats; we're anticipating them, preventing them, and recovering quickly when the unexpected happens. Our employees feel safe, our assets are protected, and our brand reputation is solid. If it's not done well, frankly, we're looking at major incidents, significant financial losses, and potentially irreversible damage to our standing. The challenge? You're constantly balancing security needs with operational realities and budget constraints, often having to justify investments in things that *don't* happen. The reward is seeing your strategy keep thousands of people safe and hundreds of millions in assets secure, knowing you've built a truly robust defence.

Reporting Structure

• Reports to: Chief Operating Officer (COO)
• Direct reports: Typically 3-8 (Regional Security Managers, Senior Specialists)
• Matrix relationships: VP, Physical Security, Head of Corporate Security, Global Security Lead,

Key Stakeholders

Internal:

• Chief Operating Officer (COO)
• Chief Financial Officer (CFO)
• Head of Facilities Management
• Head of HR
• Legal Counsel
• Head of Real Estate Development
• Regional Operations Directors

External:

• Security Technology Vendors (e.g., Genetec, Milestone, Everbridge)
• Contract Guarding Services (e.g., G4S, Securitas)
• Law Enforcement Agencies (local and international)
• Emergency Services
• Insurance Providers
• Industry Bodies (e.g., ASIS International)
• External Security Consultants

Organisational Impact

Scope: This role directly shapes the safety and security culture of the entire organisation. You'll influence major capital expenditure decisions, ensure compliance with global regulations, and protect our people, properties, and brand. Your decisions impact our operational continuity, financial stability, and our ability to attract and retain talent. It's about building trust, both internally and externally.

Performance Metrics

Quantitative Metrics

1. Metric: Reduction in Security-Related Losses
2. Desc: Overall financial impact from theft, vandalism, property damage due to security breaches, and liability claims related to security incidents.
3. Target: Reduce by £500,000 annually, or 15% year-on-year, whichever is greater.
4. Freq: Quarterly and Annually
5. Example: If total losses were £3.5M last year, the target for this year would be £2.975M. This includes everything from stolen equipment to insurance payouts for security failures.
6. Metric: Security Audit & Compliance Score
7. Desc: Performance against internal and external security audit standards (e.g., ASIS GSFM, local regulatory requirements).
8. Target: Achieve and maintain a 'Green' rating (90%+) on all internal and external security audits. No critical non-conformities.
9. Freq: Bi-annually (internal), Annually (external)
10. Example: Successfully pass the annual ISO 27001 physical security audit with zero major findings, or score 95% on the ASIS Global Security Framework audit for all major regions.
11. Metric: Emergency Response Readiness
12. Desc: Timeliness and effectiveness of emergency response plans, measured through tabletop exercises and full-scale drills.
13. Target: 100% of critical sites complete two emergency drills and one tabletop exercise annually, with post-exercise 'Hot Wash' action items completed within 30 days.
14. Freq: Quarterly (for action item completion), Annually (for overall programme)
15. Example: After a simulated active threat exercise at our London HQ, the team identified 3 key areas for improvement. All 3 were addressed and re-tested within the month, demonstrating agility.
16. Metric: Security Technology Uptime & Performance
17. Desc: Reliability and operational status of critical security systems (ACS, VMS, Mass Notification).
18. Target: Maintain 99.9% uptime for all core security systems. Reduce false alarms by 20% year-on-year across the portfolio.
19. Freq: Monthly
20. Example: Our Genetec Synergis system had zero unplanned outages last quarter, and we managed to reduce door-forced-open false alarms by 25% through better sensor calibration and door maintenance.

Qualitative Metrics

1. Metric: Executive & Board Confidence
2. Desc: The degree to which executive leadership and the Board of Directors trust your strategic advice and the security function's overall capability.
3. Evidence: You're proactively consulted on new property acquisitions or major operational changes. Your quarterly security briefings are seen as essential, not just a formality. The Board actively seeks your input on risk mitigation strategies. They listen when you say 'no' to a risky venture.
4. Metric: Proactive Risk Mitigation
5. Desc: Your ability to identify emerging threats and vulnerabilities before they become incidents, and implement effective controls.
6. Evidence: You present a clear, forward-looking threat landscape analysis to the COO annually. New security programmes (e.g., enhanced travel security, counter-surveillance training) are launched in response to identified risks, not just after an incident. You're seen as an innovator in security, not just a maintainer.
7. Metric: Team Leadership & Development
8. Desc: The effectiveness of your leadership in building, motivating, and developing a high-performing global security team.
9. Evidence: Your direct reports consistently meet or exceed their performance goals. You have a clear succession plan for key roles. Employee engagement scores within your team are consistently high. You're known for developing talent and fostering a culture of continuous improvement.
10. Metric: Cross-Functional Collaboration
11. Desc: How well you work with other departments (Facilities, HR, Legal, IT) to embed security into their operations.
12. Evidence: Security requirements are integrated into new building design processes from the start. HR regularly consults you on workplace violence prevention. Legal seeks your input on privacy and data protection related to physical security systems. You're seen as a partner, not just a gatekeeper.

Primary Traits

• Trait: Calm Under Pressure
• Manifestation: When a major incident hits—think a fire alarm at HQ or a serious breach at a regional office—your voice stays level, your instructions are clear, and you're methodically working through the emergency plan. You're the eye of the storm, de-escalating panic in others, whether it's an irate tenant or a stressed-out regional manager. You don't just 'not panic'; you actively project competence and control, which frankly, is contagious.
• Benefit: In a real crisis, people look to you. If you lose your head, everyone else will. Your ability to remain composed directly impacts the safety of our people, the speed of our response, and ultimately, how well we recover. A Director who can't handle the heat will quickly undermine confidence in the entire security function, and that's a risk we can't take.
• Trait: Decisive, Even with Incomplete Info
• Manifestation: You're comfortable making the tough calls, sometimes with only 60% of the information you'd ideally want. This means authorising a building lockdown based on a credible but unconfirmed threat, or green-lighting an emergency security repair without waiting for three layers of budget approval. You give clear, unambiguous commands during a live incident or a high-stakes drill, because hesitation can have serious consequences. You own your decisions, good or bad.
• Benefit: Security incidents don't wait for perfect information. Delaying a critical decision by even a few minutes can escalate a minor issue into a major catastrophe. We need someone who can weigh risks quickly, make a judgment call, and then stand by it. 'Analysis paralysis' in this role isn't just frustrating; it's dangerous. You're accountable for the outcomes, so you need to be comfortable making those calls.
• Trait: Pragmatic Skepticism
• Manifestation: You're the person who doesn't just take a vendor's sales pitch at face value; you're asking for proof, case studies, and specific data on false positive rates. When a regional manager says 'everything's fine,' you're asking for the audit logs, the incident reports, and the last drill results. You assume things *can* go wrong and actively look for the cracks, whether it's a misconfigured access schedule or a guard falling asleep on camera. It's not about distrusting people, it's about verifying systems.
• Benefit: Security is fundamentally about managing risk and preventing bad things from happening. A healthy dose of skepticism prevents complacency and helps uncover vulnerabilities that others might miss. You need to challenge assumptions, question the status quo, and constantly look for weaknesses in our defences. This mindset is crucial for proactive risk management and ensuring our security programmes are truly robust, not just 'security theatre'.

Supporting Traits

• Trait: Influential
• Desc: You can persuade senior leadership to invest millions in non-revenue-generating security upgrades, not just because it's 'the right thing to do,' but because you can articulate the business risk and ROI clearly. You can get different departments to work together on complex security projects.
• Trait: Strategic Thinker
• Desc: You're not just fixing today's problems; you're thinking 3-5 years ahead, anticipating future threats, and building a security architecture that can adapt. You see the bigger picture beyond individual incidents.
• Trait: Resilient
• Desc: You can bounce back after a major incident, a contentious investigation, or having a multi-million-pound budget request heavily cut. You learn from setbacks and keep pushing forward, because the threats don't stop.
• Trait: Empathetic Communicator
• Desc: You can deliver tough news (e.g., a security breach, a policy change) with clarity and compassion. You can communicate effectively with everyone from a traumatised employee to the CEO, tailoring your message to their needs.

Primary Motivators

1. Motivator: Protecting People and Assets
2. Daily: You get a genuine sense of purpose from knowing your work directly contributes to the safety of thousands of employees and the security of valuable properties. You're driven by the responsibility to prevent harm and loss.
3. Motivator: Solving Complex, High-Stakes Problems
4. Daily: You thrive on dissecting intricate security challenges, from designing a global access control policy to managing a multi-jurisdictional investigation. The higher the stakes, the more engaged you are.
5. Motivator: Building and Shaping a World-Class Security Function
6. Daily: You're motivated by the opportunity to define strategy, implement new technologies, and develop a high-performing team. You want to leave a legacy of a truly robust and respected security organisation.

Potential Demotivators

Honestly, this job isn't for everyone. You'll spend a significant chunk of your time fighting for budget, trying to convince people that security isn't just a cost, but a critical business enabler. You'll deal with constant resistance to policy changes, even when they're for everyone's good. You'll also face the frustrating reality that the human factor is often the weakest link – people will forget their badges, prop doors open, and generally bypass controls, no matter how much training you provide. The 'urgent' project that took over your week might get deprioritised by the COO on Friday. You'll also have to manage vendors who consistently underperform, and the endless cycle of false alarms can be draining. If you need constant positive reinforcement or can't handle being the 'bad cop' sometimes, you'll struggle.

Common Frustrations

1. The eternal budget battle: Constantly justifying non-revenue-generating security spend.
2. The 'human factor' problem: Employees bypassing controls despite training.
3. Vendor management nightmares: High turnover and underperformance from contract guard services.
4. False alarm fatigue: The mental drain of responding to countless benign alerts.
5. Integration hell: Legacy systems that don't talk to new tech, turning you into an unpaid integrator.
6. Being the 'No' person: Enforcing unpopular policies and denying requests.
7. Security theatre vs. real security: Pressure to implement visible but ineffective measures.

What Role Doesn't Offer

1. A quiet, predictable routine with minimal surprises.
2. Instant gratification from every project you start.
3. Universal popularity across all departments (you'll often be the one enforcing rules).
4. Unlimited budget for every security enhancement you envision.
5. A role where you're solely focused on technical implementation without strategic oversight.

ADHD Positives

1. The high-stakes, dynamic nature of crisis response can be highly engaging and stimulating, allowing for hyperfocus when it truly matters.
2. The need for rapid, decisive action in emergencies can play to strengths in quick thinking and problem-solving under pressure.
3. The variety of tasks—from strategic planning to incident management to vendor negotiations—can prevent boredom and maintain interest.

ADHD Challenges and Accommodations

1. The extensive documentation and reporting requirements, especially for compliance and legal, can be challenging. We can offer tools for dictation, structured templates, and dedicated admin support for report finalisation.
2. Maintaining focus during long strategic meetings or budget reviews might be difficult. We encourage short breaks, fidget tools, and pre-reading materials to help structure attention.
3. Managing multiple complex projects and deadlines can be overwhelming. We use project management software with clear task breakdowns and regular check-ins to help structure work and prioritise.

Dyslexia Positives

1. Often brings strong spatial reasoning, which is excellent for understanding and designing physical security layouts (CPTED, camera placement, access flow).
2. Can excel in verbal communication, de-escalation, and leading teams during incidents where quick, clear spoken instructions are paramount.
3. Strengths in pattern recognition can be invaluable for identifying anomalies in security footage or incident trends that others might miss.

Dyslexia Challenges and Accommodations

1. Reading and writing lengthy policies, detailed incident reports, and complex contracts can be time-consuming. We offer dictation software, text-to-speech tools, and support for proofreading critical documents.
2. Processing large amounts of written information quickly, such as audit reports or threat intelligence briefings, might require more time. Providing summaries or audio versions where possible can help.
3. Ensuring accuracy in written communications (emails, formal reports) is crucial. We encourage the use of grammar and spell-checking tools, and peer review for important documents.

Autism Positives

1. Exceptional attention to detail, crucial for spotting security vulnerabilities, reviewing technical configurations, and ensuring compliance.
2. A logical and methodical approach to problem-solving, which is ideal for threat modelling, risk assessments, and developing robust security protocols.
3. Direct and clear communication style, which is highly valued in security for conveying critical information without ambiguity, especially in emergencies.

Autism Challenges and Accommodations

1. Navigating complex social dynamics, especially in cross-functional negotiations or managing difficult vendor relationships, can be draining. We can provide coaching on specific communication strategies and support in mediating challenging interactions.
2. Unexpected changes in routine or sudden, high-pressure incidents can be stressful. Clear protocols, pre-planned responses, and advance notice for non-urgent changes can help manage this.
3. Sensory sensitivities to noise or specific lighting in a Security Operations Centre (SOC) environment. We can explore noise-cancelling headphones, ergonomic setups, and flexible work arrangements where possible to minimise discomfort.

Key Responsibilities

Experience Levels Responsibilities

1. Level: Director of Global Security
2. Responsibilities: Define the multi-year global physical security strategy, aligning it with the overall business objectives and risk appetite. This means figuring out where we need to be in 3-5 years, not just next quarter.
3. Own the entire security budget (typically £2M-£10M+ annually) across all properties, making tough calls on where to invest and where to cut. You'll present this to the COO and CFO, so be ready to defend every pound.
4. Build, lead, and mentor a high-performing global team of security professionals, including direct reports and a much larger network of regional managers and site supervisors. This isn't just about managing; it's about developing future leaders.
5. Oversee the design, implementation, and maintenance of all enterprise-wide security programmes, from access control and video surveillance to emergency preparedness and executive protection. You're the architect of our defence.
6. Represent the organisation at a senior level with law enforcement, government agencies, industry bodies (like ASIS), and major security vendors. You'll be our public face for security matters.
7. Drive continuous improvement in our security posture by regularly reviewing threat intelligence, conducting comprehensive risk assessments, and implementing new technologies or processes. Complacency isn't an option.
8. Lead major incident response efforts, serving as the ultimate authority during critical events that impact multiple sites or have significant business implications. When things go really wrong, you're the one in charge.
9. Supervision: You'll operate with a high degree of autonomy, reporting directly to the COO with monthly strategic alignment meetings and quarterly business reviews. Day-to-day, you're expected to set your own priorities and manage your team without constant oversight.
10. Decision: Full strategic and operational authority for the global security function. This includes budget allocation up to £10M+, final say on security technology selection, vendor contract negotiations, hiring and firing decisions within your department, and defining enterprise-wide security policies. You'll make critical decisions during major incidents, potentially impacting business operations or property access. Board-level decisions (e.g., major capital projects over £10M, M&A security integration) will require alignment with the COO and CEO.
11. Success: Your success will be measured by a significant reduction in security-related losses, maintaining top-tier audit and compliance scores, and the demonstrable resilience of our organisation in the face of threats. We'll also look at your ability to build a strong, respected security culture and develop your team. Ultimately, it's about making sure our business can operate safely and without disruption, protecting our people and our bottom line.

Decision-Making Authority

• Type: Strategic Direction for Global Security
• Entry: N/A
• Mid: N/A
• Senior: N/A
• Type: Budget Allocation & Spend (Security Function)
• Entry: N/A
• Mid: N/A
• Senior: N/A
• Type: Major Incident Response (Enterprise-level)
• Entry: Executes assigned tasks during an incident, following established protocols.
• Mid: Leads incident response for a single site/event. Escalates complex issues to senior/lead.
• Senior: Leads complex incident investigations and responses for multiple sites or significant events. Informs Director.
• Type: Security Technology Selection & Deployment
• Entry: Uses existing systems as instructed.
• Mid: Provides feedback on system usability. Troubleshoots basic issues.
• Senior: Evaluates new features/minor upgrades. Makes recommendations for system improvements within their area.

Competency Requirements

Foundation Skills (Transferable)

As a Director, your foundation skills are less about doing and more about leading, influencing, and thinking strategically. You're setting the tone and direction for a global function.

• Category: Strategic Leadership & Vision
• Skills: Ability to define and articulate a compelling multi-year security strategy that aligns with business goals.
• Demonstrated capability to build and inspire a global team, fostering a culture of excellence and accountability.
• Strong financial acumen to manage multi-million-pound budgets and justify security investments to executive leadership.
• Category: Executive Communication & Influence
• Skills: Exceptional ability to communicate complex security risks and strategies clearly and concisely to C-suite and Board members.
• Proven track record of influencing senior stakeholders across diverse departments (e.g., Legal, HR, Real Estate Development) to embed security considerations.
• Skilled in negotiation with major vendors and external partners to secure favourable terms and strong service level agreements.
• Category: Crisis Management & Resilience
• Skills: Expertise in leading and coordinating responses to high-stakes, multi-jurisdictional security incidents and emergencies.
• Ability to maintain composure and make critical decisions under extreme pressure, guiding teams through chaotic situations.
• Strong understanding of business continuity and disaster recovery principles, ensuring security supports organisational resilience.
• Category: Global Perspective & Cultural Acumen
• Skills: Understanding of diverse international security threats, regulatory landscapes, and cultural nuances across different operating regions.
• Experience managing security programmes and teams across multiple countries, adapting strategies to local contexts.
• Ability to build relationships with international law enforcement and government agencies.

Functional Skills (Role-Specific Technical)

You'll need a deep, almost innate understanding of physical security principles, coupled with the strategic insight to apply them across a vast and varied property portfolio. This means moving beyond just knowing the tools to understanding their strategic deployment and integration.

Technical Competencies

• Skill: CPTED (Crime Prevention Through Environmental Design)
• Desc: Applying principles of natural surveillance, access control, and territoriality to building design and landscaping, but at a strategic level. You'll be influencing architects and developers on new builds and major renovations to 'design out' crime from the ground up.
• Level: Expert
• Skill: Threat, Vulnerability, and Risk Assessment (TVRA)
• Desc: Leading formal, structured methodologies for identifying security threats, assessing vulnerabilities, and recommending mitigating controls across an entire global portfolio. This isn't just about doing the assessment; it's about defining the methodology and ensuring consistent application.
• Level: Expert
• Skill: Guard Force Management & Optimization
• Desc: Developing global Post Orders, defining KPIs for multi-national contract guard services, using data to strategically optimise patrol routes and staffing levels across regions, and managing complex vendor SLAs at an enterprise level. This means managing relationships and performance across multiple large providers.
• Level: Expert
• Skill: Incident Command System (ICS)
• Desc: Implementing and overseeing a standardised command and control structure during enterprise-level emergencies (e.g., active threats, major natural disasters) to manage resources, communication, and response effectively across multiple sites and jurisdictions. You're the ultimate incident commander.
• Level: Expert
• Skill: Emergency Preparedness & Tabletop Exercises
• Desc: Designing and overseeing the execution of realistic drills and simulations (including multi-site tabletop exercises) to test and refine enterprise-wide emergency response plans with C-suite stakeholders from facilities, HR, and legal. You're not just running drills; you're stress-testing the organisation's resilience.
• Level: Expert
• Skill: Physical Security Investigations (Complex)
• Desc: Overseeing and guiding complex, sensitive investigations that may involve multiple jurisdictions, significant financial loss, or reputational risk. This includes setting investigation protocols, ensuring legal compliance, and liaising with senior law enforcement and legal counsel.
• Level: Advanced

Digital Tools

• Tool: Genetec Synergis / LenelS2 OnGuard (Access Control)
• Level: Strategic
• Usage: Leading vendor selection for enterprise-wide ACS, setting global access control policies, overseeing platform architecture and integration strategy with HRIS and visitor management systems. You're defining *how* we use these systems, not just using them.
• Tool: Milestone XProtect / Avigilon Control Center (VMS)
• Level: Strategic
• Usage: Developing enterprise video retention policies, architecting camera placement strategy for new builds based on CPTED principles, and evaluating AI-driven video analytics platforms for global deployment. You're thinking about the future of video surveillance.
• Tool: Resolver / ServiceNow (Incident Management)
• Level: Strategic
• Usage: Owning the enterprise incident management platform, defining global incident taxonomies, creating executive dashboards in Tableau/Power BI using platform data, and ensuring data integrity for compliance and legal purposes. You're using this data to drive strategic decisions.
• Tool: Everbridge / OnSolve (Mass Notification)
• Level: Strategic
• Usage: Developing the enterprise crisis communication strategy, integrating the platform with other critical systems (e.g., fire alarms, BMS), and negotiating enterprise-level contracts. You're ensuring we can communicate instantly and effectively during any crisis.
• Tool: Johnson Controls Metasys / Siemens Desigo (BMS)
• Level: Strategic
• Usage: Influencing BMS design in new constructions to ensure security requirements (e.g., lockdown sequences, fire system integration, critical system overrides) are met from the ground up. You're ensuring security is baked in, not bolted on.
• Tool: Envoy / iLobby (Visitor Management Systems)
• Level: Strategic
• Usage: Setting the corporate policy for visitor access and data handling across the global portfolio, and selecting and deploying the enterprise standard platform. This includes ensuring GDPR/CCPA compliance for visitor data at a global scale.

Industry Knowledge

• Area: Global Security Standards & Best Practices
• Desc: Deep understanding and practical application of international security standards (e.g., ASIS Global Security Risk Management Standard, ISO 27001 physical security controls) across diverse regulatory environments.
• Area: Real Estate Development & Construction Security
• Desc: Expert knowledge of integrating security requirements into the entire lifecycle of real estate development, from site selection and architectural design to construction oversight and commissioning, ensuring security is 'built-in'.
• Area: Corporate Governance & Compliance
• Desc: Understanding of corporate governance principles, board reporting requirements, and the legal and ethical implications of security operations, including privacy laws (GDPR, CCPA) and investigative protocols.
• Area: Security Economics & ROI
• Desc: Ability to articulate the financial value of security investments, develop robust business cases, and demonstrate return on investment (ROI) for non-revenue-generating programmes to executive leadership.

Regulatory Compliance Regulations

• Reg: General Data Protection Regulation (GDPR) / UK Data Protection Act
• Usage: Ensuring all physical security systems (CCTV, access control logs, visitor management) and investigative practices comply with data privacy regulations for employee and visitor data across our European operations. You'll be the ultimate authority on this for security.
• Reg: Health and Safety at Work Act 1974 (UK) / OSHA (US) & local equivalents
• Usage: Integrating security measures with health and safety protocols to ensure a safe working environment, particularly concerning emergency egress, workplace violence prevention, and security equipment safety standards. You'll work closely with H&S teams.
• Reg: Local Building Codes & Fire Safety Regulations
• Usage: Ensuring physical security installations (e.g., door hardware, access control integration with fire alarms, emergency lighting) comply with all relevant local building codes and fire safety regulations across the global portfolio. This often means working with local facilities teams and consultants.
• Reg: Private Security Industry Act 2001 (UK) / equivalent licensing laws
• Usage: Ensuring all contracted security personnel and internal security staff (where applicable) hold the correct licences and certifications for their roles and jurisdictions, particularly for guard force management in the UK and internationally.

Essential Prerequisites

• Extensive experience (10+ years) in a senior leadership role within a corporate physical security function, ideally in a multi-site or global real estate/facilities management environment.
• Proven track record of managing multi-million-pound security budgets and demonstrating ROI for security investments.
• Demonstrated experience building, leading, and developing high-performing security teams, including managing regional managers and large contractor forces.
• Expertise in developing and implementing enterprise-wide physical security strategies, policies, and programmes.
• Significant experience in crisis management and leading responses to major security incidents.
• Strong understanding of security technology landscapes, including ACS, VMS, mass notification, and their strategic integration.
• Deep knowledge of global security threats, compliance requirements, and best practices.

Career Pathway Context

Before stepping into this Director role, you'd typically have spent time as a Senior Manager of Corporate Security or a Regional Security Manager, where you managed a significant portion of a security function or a large geographic area. You'd have already proven your ability to lead teams, manage budgets, and handle complex security challenges independently. This role is about scaling that impact to a global level and operating at a more strategic, executive-facing level.

Qualifications & Credentials

Emerging Foundation Skills

• Skill: AI-Driven Security Orchestration & Automation
• Why: Our competitors are already using AI to automate routine security tasks, predict threats, and orchestrate responses faster than any human team could. Leaders who don't embrace this will find their teams overwhelmed and outmanoeuvred. It's about efficiency and effectiveness at scale.
• Concepts: [{'concept_name': 'Security Orchestration, Automation, and Response (SOAR)', 'description': 'Understanding how to design and implement automated workflows for incident response, threat hunting, and vulnerability management using AI-powered platforms.'}, {'concept_name': 'Predictive Analytics for Physical Security', 'description': 'Using machine learning to analyse historical data (incidents, patrols, access logs) to predict future risk hotspots and optimise resource deployment.'}, {'concept_name': 'AI Ethics & Bias in Security', 'description': 'Recognising and mitigating potential biases in AI algorithms used for facial recognition, anomaly detection, or predictive policing, ensuring fair and ethical deployment.'}, {'concept_name': 'LLM Integration for Threat Intelligence', 'description': 'Using large language models to rapidly synthesise vast amounts of unstructured data (news, social media, intelligence reports) into actionable threat intelligence briefings.'}]
• Prepare: This quarter: Attend an executive briefing or workshop on AI in physical security. Understand the landscape.
• Next 6 months: Identify one key area (e.g., incident reporting, patrol planning) where AI could deliver significant time savings or improved effectiveness. Pilot a solution.
• Next 12 months: Develop a strategic roadmap for AI adoption within the global security function, including budget implications and talent needs.
• Ongoing: Engage with AI vendors, industry peers, and academic institutions to stay abreast of the latest advancements and ethical considerations.
• QuickWin: Start experimenting with AI tools like ChatGPT or Claude for drafting security policy summaries, generating initial incident report narratives, or quickly synthesising threat intelligence reports. No budget needed to start learning.
• Skill: Cyber-Physical Convergence Strategy
• Why: The lines between cyber and physical security are blurring rapidly. A breach in our BMS or access control system can have physical consequences, and vice-versa. Future security leaders must understand both domains to build truly holistic defences. It's no longer enough to be an expert in just one.
• Concepts: [{'concept_name': 'IoT Security in Real Estate', 'description': 'Understanding the vulnerabilities of connected devices (BMS sensors, smart locks, IP cameras) and how to secure them against cyber attacks.'}, {'concept_name': 'Operational Technology (OT) Security', 'description': 'Knowledge of securing industrial control systems (ICS) and building automation systems (BAS) that underpin modern facilities.'}, {'concept_name': 'Threat Modelling for Integrated Systems', 'description': 'Developing comprehensive threat models that consider both cyber and physical attack vectors against converged systems.'}, {'concept_name': 'Unified Security Operations Centre (USOC)', 'description': 'Designing and implementing a SOC that monitors and responds to both cyber and physical security incidents from a single pane of glass.'}]
• Prepare: This quarter: Schedule regular meetings with the Head of IT Security. Understand their top concerns and how they relate to physical infrastructure.
• Next 6 months: Commission a joint cyber-physical risk assessment for a critical property. Identify key convergence points.
• Next 12 months: Develop a cross-functional working group with IT Security to address identified risks and develop integrated response plans.
• Ongoing: Pursue certifications or training in OT security or industrial control system cybersecurity to bridge knowledge gaps.
• QuickWin: Review your current incident response plans with the IT Security team. Look for gaps where a cyber attack could lead to a physical impact, or vice-versa. Start small, but start now.

Advancing Technical Skills

• Skill: Advanced Analytics & Data Visualisation
• Why: Moving beyond basic reporting, you'll need to interpret complex data visualisations from AI platforms and security dashboards to extract actionable insights. This helps you make data-driven strategic decisions and present compelling cases to the Board.
• Concepts: [{'concept_name': 'Dashboards & KPIs (Power BI/Tableau)', 'description': 'Designing and interpreting executive-level dashboards that provide real-time insights into security posture, incident trends, and operational efficiency.'}, {'concept_name': 'Statistical Analysis for Security', 'description': 'Understanding how to interpret statistical models used in predictive security analytics (e.g., probability of incidents, effectiveness of controls).'}, {'concept_name': 'Geospatial Analysis (GIS)', 'description': 'Using GIS tools to visualise crime patterns, asset locations, and patrol routes to optimise resource deployment and CPTED strategies.'}]
• Prepare: This month: Get familiar with Power BI or Tableau. Ask your data team to show you how they build dashboards.
• Next 3 months: Work with your team to design a new executive-level security dashboard that provides strategic insights, not just raw numbers.
• Next 6 months: Challenge your team to use more advanced statistical methods in their incident trend analysis, and learn to interpret the results.
• Ongoing: Read up on data visualisation best practices to ensure your presentations are impactful and clear.
• QuickWin: Ask your current reporting team to add one new, visually compelling chart to your monthly security report that highlights a key trend or risk. Push for clarity over complexity.

Education Requirements

• Level: Minimum
• Req: Bachelor's degree in Security Management, Criminal Justice, Business Administration, or a related field.
• Alts: Extensive (20+ years) and demonstrable experience in a senior corporate security leadership role, with a strong track record of success, may be considered in lieu of a degree. We're looking for proven capability, not just a piece of paper.
• Level: Preferred
• Req: Master's degree (MSc) in Security Management, MBA, or a relevant postgraduate qualification.
• Alts: Relevant executive leadership programmes or advanced certifications (e.g., CPP, PSP) combined with significant practical experience.

Experience Requirements

You'll need at least 16-20 years of progressive experience in corporate physical security, with a significant portion (8-10 years) spent in a senior leadership or management role overseeing a multi-site or global security operation. This isn't an entry-level leadership role; we need someone who has already been in the trenches and then led others out of them. Experience in the Real Estate or Facilities Management sector is highly advantageous, as you'll already understand the unique challenges of securing diverse property portfolios.

Preferred Certifications

• Cert: Physical Security Professional (PSP)
• Prod: ASIS International
• Usage: Demonstrates specialised expertise in physical security assessments, design, and implementation, which is crucial for our property portfolio.
• Cert: Professional Certified Investigator (PCI)
• Prod: ASIS International
• Usage: Shows advanced skills in managing and conducting complex security investigations, which you'll oversee at a strategic level.
• Cert: Certified Information Security Manager (CISM)
• Prod: ISACA
• Usage: Highlights an understanding of information security governance and risk management, increasingly important for cyber-physical convergence.
• Cert: Crisis Management Certification
• Prod: Various (e.g., BCI, FEMA)
• Usage: Demonstrates specialised knowledge in developing and leading organisational responses to major crises and business disruptions.

Recommended Activities

• Active participation in global security industry associations (e.g., ASIS International, OSAC) as a speaker, committee member, or thought leader.
• Regular attendance at executive-level security conferences and summits (e.g., GSX, ISC West, Black Hat for cyber-physical insights).
• Enrolling in executive leadership programmes focused on global business, risk management, or organisational resilience.
• Mentoring junior security professionals within the organisation and externally, sharing your vast experience.
• Publishing articles or white papers on emerging security trends or best practices in real estate facilities management.

Career Progression Pathways

Entry Paths to This Role

• Path: Senior Manager, Corporate Security (Large Enterprise)
• Time: 5-8 years in this role before Director
• Path: Regional Security Director (Global Organisation)
• Time: 5-7 years in this role before Director
• Path: Head of Security (Mid-sized Company)
• Time: 4-6 years in this role before Director (at a larger firm)

Career Progression From This Role

• Pathway: Chief Security Officer (CSO)
• Time: 3-5 years as Director of Global Security

Long Term Vision Potential Roles

• Title: Chief Security Officer (CSO)
• Time: 3-5 years
• Title: Chief Operating Officer (COO) / Head of Facilities Management
• Time: 5-10 years
• Title: Global Head of Risk & Resilience
• Time: 5-8 years

How Zavmo Delivers This Role's Development

DISCOVER Phase: Skills Gap Analysis

Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.

Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.

DISCUSS Phase: Personalised Learning Pathway

Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).

Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.

DELIVER Phase: Conversational Learning

Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.

Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."

DEMONSTRATE Phase: Competency Assessment

Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.

Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.