Director, Corporate Security

Role Purpose & Context

Role Summary

The Director, Corporate Security is responsible for defining, building, and running the overarching security programme for our entire real estate portfolio. This means you'll be shaping the strategy that keeps our properties, tenants, and staff safe across multiple locations, which directly impacts our operational resilience and brand reputation. You'll sit right at the top, working closely with the executive team to make sure security is baked into everything we do, from new developments to daily operations. When this role is done well, we see a significant reduction in security incidents, our properties are recognised as secure environments, and our tenants feel genuinely safe. Get it wrong, and we're looking at major financial losses, reputational damage, and, frankly, risks to people's safety. The challenge here is balancing cutting-edge security with practical, cost-effective solutions across a diverse portfolio, often dealing with legacy systems and competing priorities. The reward? You'll be building a truly secure environment, knowing your work directly protects thousands of people and millions of pounds in assets.

Reporting Structure

• Reports to: Chief Operating Officer (COO)
• Direct reports: Roughly 25-100+ security professionals, including managers and specialists across various sites.
• Matrix relationships: Head of Physical Security, VP, Facilities Security, Director of Property Security,

Key Stakeholders

Internal:

• Chief Operating Officer (COO)
• Chief Financial Officer (CFO)
• Head of Property Development
• Head of Facilities Operations
• Legal & Compliance Director
• IT Director
• HR Director
• Board Audit Committee

External:

• Major Security Integrators & Vendors
• Law Enforcement & Emergency Services
• Key Tenants & Clients
• Regulatory Bodies (e.g., HSE, local councils)
• Insurance Providers
• Industry Associations

Organisational Impact

Scope: This role drives the transformation of our security posture across the entire business unit. You'll be making decisions that directly influence our P&L, risk profile, and market standing. Your strategic choices impact how we design, build, and operate our properties, ensuring they're secure, compliant, and resilient against evolving threats. Essentially, you're safeguarding the company's future.

Performance Metrics

Quantitative Metrics

1. Metric: Overall Security Incident Reduction
2. Desc: The year-over-year decrease in significant security incidents across the entire property portfolio.
3. Target: 15% year-over-year reduction in reportable security incidents (e.g., major theft, unauthorised access, physical assaults).
4. Freq: Quarterly and Annually
5. Example: If we had 100 significant incidents last year, you'd aim for no more than 85 this year. This isn't just about counting; it's about seeing if our proactive measures are actually working.
6. Metric: Portfolio Physical Security Risk Score Improvement
7. Desc: The improvement in our internal risk assessment scores for physical security controls across all properties.
8. Target: Improve portfolio physical security risk score from 75 to 85 (on a 100-point scale) within 18 months.
9. Freq: Bi-Annually
10. Example: After implementing new access control policies and upgrading VMS at three high-risk sites, the average risk score for those properties improved from 68 to 82. This shows strategic investment paying off.
11. Metric: Tenant Safety & Security Satisfaction
12. Desc: Feedback from tenants on their perception of safety and security within our properties, typically gathered through surveys.
13. Target: Increase tenant satisfaction survey scores related to 'Safety & Security' by 10% year-over-year.
14. Freq: Annually
15. Example: Last year, our tenant survey showed 70% felt 'very safe'. Your goal would be to push that to 77% or more. It's about perception, yes, but that's built on real security improvements.
16. Metric: Security Programme Budget Adherence
17. Desc: How closely the actual security expenditure aligns with the approved annual budget for the entire corporate security programme.
18. Target: Maintain actual spend within ±5% of the approved annual budget (£2M-£10M+).
19. Freq: Quarterly
20. Example: If the annual budget is £5M, you're expected to spend between £4.75M and £5.25M. No massive overruns, but also not underspending where critical needs exist.

Qualitative Metrics

1. Metric: Strategic Influence & Board Engagement
2. Desc: Your ability to effectively communicate security risks and strategies to the executive team and the Board, influencing key business decisions.
3. Evidence: You're regularly invited to Board Audit Committee meetings to present on security posture. Your recommendations on major security investments are consistently adopted. Executive leadership proactively seeks your input on new property acquisitions or major operational changes. They trust your judgment, basically.
4. Metric: Team Leadership & Development
5. Desc: The effectiveness of your leadership in building, mentoring, and retaining a high-performing security team across multiple locations.
6. Evidence: High retention rates within your direct and indirect teams. Positive feedback in 360-degree reviews from your managers and peers. A clear succession plan for key roles. Your team members are visibly growing and taking on more responsibility.
7. Metric: Proactive Risk Identification & Mitigation
8. Desc: Your foresight in identifying emerging security threats (physical, cyber-physical, geopolitical) and implementing preventative measures before they become incidents.
9. Evidence: Regularly presenting intelligence on new threat vectors to leadership. Successfully implementing controls that prevent incidents seen in competitor organisations. Your team isn't just reacting; they're anticipating and preparing.
10. Metric: Cross-Functional Collaboration & Integration
11. Desc: How well you work with other departments (IT, Facilities, Property Development, Legal) to embed security into their processes and achieve converged security goals.
12. Evidence: Security requirements are included early in new construction projects. IT and physical security incident response plans are fully integrated. There are no 'silos' when it comes to security issues; everyone's on the same page.

Primary Traits

• Trait: Strategic Foresight & Vision
• Manifestation: You're not just reacting to today's threats; you're looking 3-5 years down the line, anticipating what's coming. You can paint a clear picture of what 'good' security looks like for our portfolio in the future and articulate the steps to get there. You're thinking about how global events, new tech, or even climate change might impact our physical security needs.
• Benefit: In a Director role, it's easy to get bogged down in daily operations. But if you're not thinking strategically, we'll always be playing catch-up. Your job is to make sure we're investing in the right security solutions now to protect against future risks, not just patching holes as they appear. This directly impacts our long-term resilience and competitive edge.
• Trait: Decisive Leadership Under Pressure
• Manifestation: When a major incident hits—say, a significant breach at one of our flagship properties—you're the calmest person in the room. You can quickly assess complex information, make tough calls with incomplete data, and clearly direct a large team and external agencies. You're comfortable owning the decision, even when it's unpopular, because it's the right thing for safety.
• Benefit: Panic or indecision during a crisis can escalate a bad situation into a catastrophe. Our properties, and the people in them, rely on you to lead effectively when it matters most. Your ability to make swift, well-reasoned decisions protects lives, minimises damage, and maintains trust with our tenants and the public.
• Trait: Influential Communicator & Negotiator
• Manifestation: You can explain complex security risks and technical solutions in plain English to the Board, then switch gears to negotiate a multi-million-pound contract with a security integrator. You're excellent at getting different departments—like IT, Legal, and Property Development—to agree on a shared security vision, even when their priorities clash. You can sell the 'why' behind security investments, not just the 'what'.
• Benefit: As a Director, you're constantly dealing with competing priorities and limited budgets. If you can't clearly articulate the value of security, or convince others to buy into your vision, then even the best strategy will fail. Your ability to influence and negotiate ensures we get the resources and organisational buy-in needed to keep our properties safe.

Supporting Traits

• Trait: Unflappable
• Desc: Remains composed and steady, even when dealing with high-stakes situations, difficult stakeholders, or unexpected crises. You're the eye of the storm.
• Trait: Politically Astute
• Desc: Understands the internal dynamics of a large organisation, navigating different agendas and building alliances to achieve security objectives. You know who to talk to and how to frame your message.
• Trait: Ethical & Principled
• Desc: Upholds the highest standards of integrity and confidentiality, especially when dealing with sensitive information or making decisions that impact privacy and safety. No cutting corners, ever.
• Trait: Continuous Learner
• Desc: Stays on top of emerging threats, technologies, and best practices in physical and cyber-physical security, always looking for ways to improve our posture. The threat landscape never stands still, so neither should you.

Primary Motivators

1. Motivator: Protecting People & Assets at Scale
2. Daily: You get a real buzz from knowing your strategic decisions directly contribute to the safety of thousands of people across our portfolio. Seeing a new security system go live, or a successful incident drill, gives you a sense of purpose. You're driven by the tangible impact of your work on real-world safety.
3. Motivator: Building & Mentoring High-Performing Teams
4. Daily: You genuinely enjoy developing your managers and specialists, helping them grow their careers and tackle bigger challenges. You're motivated by seeing your team excel, knowing you've empowered them to deliver top-tier security operations. Their success is your success.
5. Motivator: Solving Complex, Multi-faceted Challenges
6. Daily: You thrive on untangling complicated problems that involve physical security, IT, legal, and operational aspects. The idea of designing a converged security strategy that addresses both physical and cyber-physical risks across a diverse property portfolio excites you. You don't shy away from ambiguity.

Potential Demotivators

Honestly, this role isn't for everyone. You'll often find yourself in the middle of a tug-of-war between security needs and business convenience or cost-cutting. You'll present a compelling case for a multi-million-pound security upgrade, only to have it deprioritised for a new marketing campaign. You'll have to deal with legacy systems that are a nightmare to secure and even harder to replace, often because 'it's always been done this way'. You might also face resistance from other departments who see security as a roadblock rather than an enabler.

Common Frustrations

1. Constantly fighting for budget and resources, especially for proactive security measures that don't have an immediate, obvious ROI.
2. Dealing with the political aspects of security, where executive priorities shift, or key stakeholders don't fully grasp the risk.
3. The slow pace of change in a large organisation, especially when trying to implement new technologies or processes across many sites.
4. Managing the fallout and reputational damage from incidents that could have been prevented with better investment or compliance.
5. The sheer volume of regulatory and compliance requirements that constantly evolve, demanding significant oversight and adaptation.

What Role Doesn't Offer

1. A quiet, predictable 9-to-5 job with no urgent calls. Major incidents don't stick to business hours.
2. A role where you're solely focused on deep technical work. You'll be more about strategy and people than configuring systems yourself.
3. The luxury of always having full autonomy without needing to justify decisions or gain executive buy-in. You're a leader, but you still report to the C-suite.
4. A role where you can avoid difficult conversations or challenging entrenched ways of working. You'll be a change agent, and that's rarely easy.

ADHD Positives

1. The fast-paced, high-stakes nature of incident response and crisis management can be highly engaging and stimulating, playing to strengths in hyperfocus during critical moments.
2. The need to quickly pivot between strategic planning, operational oversight, and executive communication can suit those who thrive on variety and dynamic problem-solving.
3. A natural inclination for innovative thinking can be a huge asset in developing novel security strategies and anticipating future threats.

ADHD Challenges and Accommodations

1. Sustained focus on detailed policy documentation or lengthy compliance reports might be challenging; breaking these down into smaller, manageable chunks or using dictation tools could help.
2. Managing a large team and numerous concurrent strategic initiatives requires strong organisational systems; support with executive assistants or project management tools could be beneficial.
3. We can offer flexible working arrangements where possible to help manage energy levels and focus, and provide quiet spaces for deep work when needed.

Dyslexia Positives

1. Often brings strong spatial reasoning, which is fantastic for understanding physical layouts, camera placements, and designing optimal security architectures.
2. Excellent problem-solving skills, especially in complex, non-linear situations, which is crucial for incident analysis and strategic risk assessment.
3. Strong verbal communication and storytelling abilities, which are invaluable for presenting complex security concepts to executive and board-level audiences.

Dyslexia Challenges and Accommodations

1. Reading and writing extensive policy documents, detailed reports, or legal compliance texts might be more time-consuming; we can provide access to proofreading software, dictation tools, and offer support from administrative staff for document preparation.
2. We encourage the use of visual aids, diagrams, and verbal presentations over purely text-based formats for communicating key information, especially during strategic reviews.
3. Flexible deadlines for written deliverables can be discussed, focusing on the quality and content of the strategy rather than the speed of its written production.

Autism Positives

1. A deep, analytical approach to security systems and protocols, often spotting patterns or inconsistencies others miss, which is critical for robust risk assessment and system design.
2. Strong adherence to logic and process, ensuring that security policies are consistently applied and that incident response plans are followed meticulously.
3. Exceptional ability to focus on specific, complex technical details or data sets, which is invaluable for deep-dive investigations or architectural reviews.

Autism Challenges and Accommodations

1. Navigating complex social dynamics and unspoken corporate politics, especially in executive-level negotiations, might be challenging; we can provide clear expectations for communication and offer coaching on stakeholder engagement strategies.
2. Unexpected changes in strategic direction or urgent, unplanned meetings could be disruptive; we aim for clear agendas, advance notice for changes, and provide opportunities for pre-briefings.
3. We can offer a structured onboarding plan, clear communication channels, and a quiet office environment or option for remote work to minimise sensory overload, especially during intense periods.

Key Responsibilities

Experience Levels Responsibilities

1. Level: Director, Corporate Security (OFQUAL Level 8)
2. Responsibilities: Define the multi-year corporate security strategy and roadmap for our entire real estate portfolio, getting buy-in from the C-suite and Board. This means looking at where we are, where we need to be, and how we'll get there, typically over a 3-5 year horizon.
3. Own the overall security risk posture for the business unit, which includes identifying, assessing, and mitigating physical, converged, and operational technology (OT) security risks across all properties. If something goes wrong, it's ultimately on you.
4. Drive the transformation of our security capabilities, leading major programmes like the integration of physical and logical access systems or the deployment of advanced video analytics across dozens of sites. This often involves significant capital investment.
5. Build, lead, and mentor a high-performing team of security managers and specialists, fostering a culture of continuous improvement, accountability, and professional development. You'll be responsible for their growth and making sure we have the right talent in place.
6. Present regular security briefings and updates to the Board and executive leadership, clearly articulating our security posture, emerging threats, and the effectiveness of our programmes. They'll ask tough questions, so you need to be on top of your game.
7. Accountable for managing the corporate security programme's P&L, typically ranging from £2M to £10M+, ensuring efficient allocation of resources and demonstrating clear ROI for security investments. Every penny counts, and you'll need to justify it.
8. Represent the organisation externally with law enforcement, regulatory bodies, industry associations, and major security vendors, building strong relationships and staying ahead of industry trends and best practices. You're our public face for security.
9. Supervision: You'll operate with full strategic autonomy within the business unit, reporting to the COO with monthly strategic alignment meetings. Most operational decisions are delegated to your managers, but you're ultimately accountable for their outcomes.
10. Decision: Full strategic authority within the corporate security domain. This includes P&L responsibility for £2M-£10M+, making final decisions on major security system procurements, organisational design within your function, and hiring/firing for your direct reports. M&A involvement is common, with security integration decisions falling under your remit. Board-level decisions require COO and Board alignment, but your recommendations carry significant weight.
11. Success: Success at this level means a demonstrable reduction in enterprise-wide security risks, a highly effective and motivated security team, and the successful execution of multi-year security transformation programmes. You'll be seen as a trusted advisor to the Board and a leader who consistently delivers on strategic objectives, protecting the company's reputation and bottom line.

Decision-Making Authority

• Type: Security Programme Budget Approval
• Entry: N/A
• Mid: N/A
• Senior: N/A
• Type: Major Security System Procurement (e.g., new enterprise VMS)
• Entry: N/A
• Mid: N/A
• Senior: N/A
• Type: Response to Critical Enterprise-Wide Security Incident
• Entry: N/A
• Mid: N/A
• Senior: N/A
• Type: Organisational Design & Staffing within Security Function
• Entry: N/A
• Mid: N/A
• Senior: N/A

Competency Requirements

Foundation Skills (Transferable)

At this level, foundation skills aren't just about doing; they're about leading, influencing, and shaping the entire security culture. You're looking at the bigger picture, ensuring your team has the tools and guidance to excel, and that security is woven into the fabric of the business.

• Category: Strategic Leadership & Vision
• Skills: Ability to define and articulate a compelling multi-year security strategy that aligns with business objectives.
• Demonstrated capability to lead significant organisational change and drive security transformation programmes.
• Strong decision-making skills in high-pressure, ambiguous situations, with a focus on risk mitigation.
• Category: Executive Communication & Influence
• Skills: Exceptional ability to communicate complex security risks and technical concepts to non-technical executive and board audiences.
• Proven track record of influencing senior stakeholders and negotiating for resources and buy-in for security initiatives.
• Skilled in public speaking and representing the organisation externally on security matters.
• Category: Organisational Management & Development
• Skills: Experience in building, leading, and mentoring large, geographically dispersed teams of security professionals.
• Strong financial acumen, including P&L management and demonstrating ROI for security investments.
• Ability to design and implement effective security governance frameworks and operational models.
• Category: Crisis Management & Resilience
• Skills: Expertise in developing and executing enterprise-level incident response and crisis management plans for major security events.
• Ability to maintain composure and provide clear direction during high-stress situations.
• Understanding of business continuity and disaster recovery principles in a security context.

Functional Skills (Role-Specific Technical)

You won't be hands-on with every system, but you'll need a deep, strategic understanding of how they work, how they integrate, and what their capabilities and limitations are. Your functional skills are about guiding the overall architecture and ensuring our technical solutions meet our strategic goals.

Technical Competencies

• Skill: Enterprise Physical Security Architecture
• Desc: Designing and overseeing the implementation of integrated physical security systems (ACS, VMS, intrusion detection) across a large, diverse property portfolio, considering scalability, resilience, and convergence with IT systems.
• Level: Expert
• Skill: Converged Security Governance
• Desc: Developing and enforcing policies, standards, and procedures that blend physical, cyber, and operational security to provide a holistic risk management framework. This means getting IT and physical security to truly work together.
• Level: Expert
• Skill: OT/BMS Security Strategy
• Desc: Defining the strategic approach to securing Building Management Systems and other Operational Technology (HVAC, lifts, power systems), understanding their unique vulnerabilities and regulatory requirements.
• Level: Advanced
• Skill: Security Programme Management
• Desc: Leading large-scale, multi-year security programmes, including budget management, resource allocation, vendor selection, and performance monitoring across numerous projects.
• Level: Expert
• Skill: Advanced Threat Intelligence & Analysis
• Desc: Interpreting complex threat intelligence reports to understand geopolitical, criminal, and cyber threats relevant to our real estate assets, and translating these into actionable strategic mitigations.
• Level: Advanced

Digital Tools

• Tool: Access Control Systems (e.g., Genetec Synergis, LenelS2 OnGuard)
• Level: Strategic/Architect
• Usage: Leading vendor selection, defining enterprise-wide access policies, and overseeing integration strategies across the portfolio. You're not configuring, but you're dictating the 'how' and 'what'.
• Tool: Video Management Systems (e.g., Milestone XProtect, Genetec Omnicast)
• Level: Strategic/Architect
• Usage: Designing camera standards for new builds, managing video storage architecture (cloud vs. on-prem), and evaluating advanced video analytics for strategic deployment.
• Tool: SIEM & Log Management (e.g., Microsoft Sentinel, Splunk)
• Level: Strategic/Architect
• Usage: Architecting the SIEM deployment for converged security, defining enterprise-level correlation rules, and presenting incident and trend data to executive management.
• Tool: Identity & Access Management (e.g., Microsoft Entra ID, Okta)
• Level: Strategic/Architect
• Usage: Designing the overall IAM strategy, ensuring seamless integration of physical and logical access, and governing the identity lifecycle for the entire organisation.
• Tool: Incident & Service Management (e.g., ServiceNow, Jira Service Management)
• Level: Strategic/Architect
• Usage: Configuring enterprise-wide workflows and automations for incident response, managing SLAs with business units, and using data to identify systemic security problems across the portfolio.

Industry Knowledge

• Area: Physical Security Principles (CPTED)
• Desc: Deep expertise in applying Crime Prevention Through Environmental Design concepts to large-scale property developments and existing portfolio optimisation, influencing architectural and operational decisions.
• Area: Converged Incident Response Frameworks
• Desc: Designing and leading enterprise-wide incident response programmes that seamlessly integrate physical and cyber actions, ensuring a coordinated and effective response to all types of security events.
• Area: Global Security Standards & Best Practices
• Desc: Comprehensive knowledge of international security standards (e.g., ISO 27001, SOC 2, NIST CSF) and how to apply them to a diverse real estate portfolio for certification and compliance.
• Area: Vendor & Security Integrator Ecosystem
• Desc: Extensive experience in managing strategic relationships with major security integrators, technology vendors, and security consultants, including contract negotiation and performance oversight for multi-million-pound projects.

Regulatory Compliance Regulations

• Reg: GDPR (General Data Protection Regulation)
• Usage: Ensuring all physical security systems (VMS, visitor management, access logs) comply with GDPR requirements for data collection, storage, and retention across our European properties. This means you'll be working closely with Legal.
• Reg: Health and Safety at Work etc. Act 1974
• Usage: Integrating security measures with health and safety protocols to ensure a safe working environment, particularly concerning emergency exits, fire safety, and the use of security equipment. You're responsible for the safety of our people.
• Reg: Local Building Codes & Planning Regulations
• Usage: Ensuring all security installations and designs comply with local building codes, fire safety regulations, and planning permissions across various jurisdictions. This often means working with architects and local authorities.
• Reg: Industry-Specific Security Standards (e.g., CPNI, PCI DSS if applicable)
• Usage: Applying relevant industry-specific security standards to properties that house critical national infrastructure or process sensitive payment data, ensuring our facilities meet stringent requirements.

Essential Prerequisites

• At least 16 years of progressive experience in corporate security, physical security management, or a related field, with a significant portion in a leadership capacity for a large organisation or property portfolio.
• Proven ability to develop and implement enterprise-wide security strategies that have demonstrably reduced risk and improved security posture.
• Extensive experience managing large budgets (multi-million £) and leading multi-disciplinary security teams, including managers and specialists.
• Demonstrated experience in crisis management and leading incident response for significant security events.
• A strong understanding of converged security principles, blending physical and cyber security domains.
• Excellent track record of engaging with and influencing executive leadership and Board-level stakeholders.

Career Pathway Context

To step into this Director role, you'll have already proven your mettle as a senior leader, likely having managed a significant security function or a large regional security programme. You're not just technically proficient; you're a seasoned leader who can think strategically, manage complex programmes, and build high-performing teams. This isn't a role for someone still learning the ropes of management; it's for someone ready to shape an entire organisation's security future.

Qualifications & Credentials

Emerging Foundation Skills

• Skill: AI-Driven Security Strategy & Ethics
• Why: AI is rapidly transforming threat detection, video analytics, and predictive security. As a Director, you'll need to understand how to strategically deploy AI for maximum security benefit while navigating the complex ethical and privacy implications, especially in a real estate context.
• Concepts: [{'concept_name': 'Ethical AI Frameworks for Surveillance', 'description': 'Understanding the ethical guidelines and public perception around using AI in cameras, access control, and other monitoring systems.'}, {'concept_name': 'Explainable AI (XAI) in Security', 'description': 'Being able to understand and explain *why* an AI made a certain security prediction or alert, especially to legal teams or the Board.'}, {'concept_name': 'AI for Predictive Risk Modelling', 'description': 'Using AI to anticipate potential security incidents based on historical data, external factors, and behavioural patterns.'}, {'concept_name': 'AI-Powered Security Automation', 'description': 'Strategically integrating AI into security operations to automate routine tasks, enhance incident response, and reduce false positives.'}]
• Prepare: This quarter: Attend an executive briefing on AI ethics and its impact on security. Understand the basics.
• Next 6 months: Commission a white paper or internal study on the ethical implications of AI in our specific property types.
• Next 12 months: Develop a strategic roadmap for AI adoption within our security programme, focusing on specific use cases and governance.
• Regularly: Engage with industry experts and thought leaders on AI in security to stay current with best practices and emerging risks.
• QuickWin: Start by identifying one low-risk area where AI could automate a manual security task for your team (e.g., initial log analysis for common anomalies) and champion a pilot project. No need for a huge budget, just a clear problem and a smart solution.
• Skill: IoT & Smart Building Security Governance
• Why: Our buildings are getting 'smarter' with more IoT devices, sensors, and interconnected systems. This creates a massive new attack surface. You'll need to lead the strategy for securing these devices and integrating them into our overall security posture, working closely with IT and property tech teams.
• Concepts: [{'concept_name': 'IoT Device Lifecycle Management', 'description': 'Securing devices from procurement to decommissioning, including patching, configuration, and access control.'}, {'concept_name': 'Network Segmentation for IoT', 'description': 'Designing network architectures to isolate IoT devices and prevent lateral movement in case of a breach.'}, {'concept_name': 'IoT Threat Modelling', 'description': 'Identifying potential vulnerabilities and attack vectors specific to smart building technologies.'}, {'concept_name': 'Secure-by-Design for Smart Buildings', 'description': 'Ensuring security is considered from the very start of any smart building project, not as an afterthought.'}]
• Prepare: This quarter: Partner with the IT Director to conduct a joint risk assessment of our current IoT footprint across a pilot property.
• Next 6 months: Develop a draft IoT security policy for new smart building deployments, covering device standards and network architecture.
• Next 12 months: Lead a cross-functional working group (IT, Property Development, Facilities) to create a comprehensive smart building security framework.
• Regularly: Research and evaluate new IoT security solutions and vendors, understanding their applicability to our portfolio.
• QuickWin: Identify the top 3 most critical IoT devices in our buildings (e.g., smart locks, critical sensors) and ensure they have strong passwords, are patched, and are on a segmented network. It's a small win, but it builds momentum.

Advancing Technical Skills

• Skill: Advanced Converged Security Analytics
• Why: The ability to correlate vast amounts of data from physical (VMS, ACS) and cyber (network logs, endpoint data) sources is becoming crucial for identifying sophisticated threats. You'll need to understand how to build and interpret these analytics at an enterprise level.
• Concepts: [{'concept_name': 'Big Data Architectures for Security', 'description': 'Understanding how to store and process petabytes of security data efficiently for analysis.'}, {'concept_name': 'Advanced SIEM/SOAR Integration', 'description': 'Strategically integrating disparate security tools to create automated detection and response workflows.'}, {'concept_name': 'User and Entity Behaviour Analytics (UEBA)', 'description': 'Applying behavioural analytics to both physical and logical access patterns to detect anomalies.'}, {'concept_name': 'Data Visualisation for Executive Reporting', 'description': 'Presenting complex security data and trends in clear, actionable dashboards for leadership.'}]
• Prepare: This quarter: Work with your Lead Security Systems Engineer to review our current data ingestion and correlation capabilities.
• Next 6 months: Engage with SIEM vendors to understand their advanced analytics and AI capabilities for converged security.
• Next 12 months: Sponsor a project to develop a proof-of-concept for a new converged security dashboard for executive reporting.
• Regularly: Read industry reports and attend conferences focused on advanced security analytics and big data in security.
• QuickWin: Identify one key security metric that currently takes days to compile manually, and challenge your team to automate its generation and visualisation using existing tools. Small wins on efficiency add up.

Education Requirements

• Level: Minimum
• Req: A Bachelor's degree in Security Management, Business Administration, Information Technology, or a related field.
• Alts: Extensive (20+ years) equivalent professional experience in a senior security leadership role, with a demonstrable track record of success, may be considered in lieu of a degree.
• Level: Preferred
• Req: A Master's degree (e.g., MBA, MSc in Security Management, or similar).
• Alts: Relevant postgraduate certifications or executive education programmes focused on security leadership or business strategy.

Experience Requirements

You'll need at least 16-20 years of progressive experience in corporate security, physical security, or a closely related field, with a minimum of 8-10 years in a senior leadership or management capacity, ideally overseeing a multi-site or large-scale property portfolio. We're looking for someone who has genuinely led significant security programmes, managed large teams, and dealt with high-stakes incidents at an enterprise level.

Preferred Certifications

• Cert: Certified Protection Professional (CPP)
• Prod: ASIS International
• Usage: Demonstrates comprehensive knowledge in security management principles and practices, highly relevant for a Director-level physical security role.
• Cert: Certified Information Security Manager (CISM)
• Prod: ISACA
• Usage: Shows strong understanding of information security governance, risk management, and programme development, crucial for converged security leadership.
• Cert: CISSP (Certified Information Systems Security Professional)
• Prod: ISC²
• Usage: Indicates deep technical and managerial competence across various security domains, useful for overseeing cyber-physical security strategies.
• Cert: Project Management Professional (PMP)
• Prod: Project Management Institute (PMI)
• Usage: Useful for leading large-scale security implementation projects and transformation programmes effectively.

Recommended Activities

• Active participation and leadership roles in industry associations (e.g., ASIS International, OSAC, ISACA).
• Regular attendance at executive-level security conferences and summits (e.g., RSA Conference, GSX, Black Hat Executive Summit).
• Enrolling in executive leadership programmes or business management courses to enhance strategic and financial acumen.
• Mentoring junior security professionals and contributing to industry thought leadership through articles or presentations.
• Staying abreast of global geopolitical events and their potential impact on corporate security through dedicated intelligence services.

Career Progression Pathways

Entry Paths to This Role

• Path: From Senior Security Manager (Large Organisation)
• Time: 3-5 years as a Senior Manager
• Path: From Head of Regional Security (Global Company)
• Time: 4-6 years as a Regional Head
• Path: From Security Consultant (Senior Partner/Principal)
• Time: 5-8 years at Senior Consultant level

Career Progression From This Role

• Pathway: Chief Security Officer (CSO)
• Time: 3-5 years in Director role

Long Term Vision Potential Roles

• Title: Chief Security Officer (CSO)
• Time: 3-5 years post-Director
• Title: Head of Global Security Operations
• Time: 4-6 years post-Director
• Title: Security Advisor / Board Member
• Time: 7-10+ years post-Director

How Zavmo Delivers This Role's Development

DISCOVER Phase: Skills Gap Analysis

Zavmo maps your current competencies against all requirements in this job description through conversational assessment. We evaluate your foundation skills (communication, strategic thinking), functional skills (CRM expertise, negotiation), and readiness for career progression.

Output: Personalised skills gap heat map showing strengths and priorities, estimated time to competency, neurodiversity accommodations.

DISCUSS Phase: Personalised Learning Pathway

Based on your DISCOVER results, Zavmo creates a personalised learning plan prioritised by impact: foundation skills first, then functional skills. We adapt to your learning style, pace, and neurodiversity needs (ADHD, dyslexia, autism).

Output: Week-by-week schedule, each module linked to specific job responsibilities, checkpoints and milestones.

DELIVER Phase: Conversational Learning

Learn through conversation, not boring modules. Zavmo uses 10 conversation types (Socratic dialogue, role-play, coaching, case studies) to build competence. Practice difficult QBR presentations, negotiate tough renewals, and handle churn conversations in a safe AI environment before facing real clients.

Example: "For 'Stakeholder Mapping', Zavmo will guide you through analysing a complex enterprise account, identifying key decision-makers, and building an engagement strategy."

DEMONSTRATE Phase: Competency Assessment

Zavmo automatically builds your evidence portfolio as you learn. Every conversation, practice scenario, and application example is captured and mapped to NOS performance criteria. When ready, your portfolio supports OFQUAL qualification claims and demonstrates competence to employers.

Output: Competency matrix, evidence portfolio (downloadable), qualification readiness, career progression score.