The posting
SUMMARY:
The Director of Physical Security Governance & Protective Intelligence leads the Bank's enterprise physical security governance program. The role establishes strategy, policy, standards, risk assessment methodology, oversight, reporting, and continuous improvement expectations for the protection of employees, customers, facilities, and other physical assets.
This position serves as the Bank's senior advisor for physical security risk, protective intelligence, threat management, workplace violence prevention, executive threat concerns, and law enforcement coordination. Day-to-day physical security operations, including monitoring, dispatch, access administration, guard services, equipment maintenance, and frontline incident response, reside with designated operational teams. This role provides program direction, oversight, independent review, and constructive challenge rather than daily operational command.
QUALIFICATIONS REQUIRED:
Bachelor's degree in criminal justice, intelligence studies, security management, homeland security, emergency management, public administration, military science, or a related field is required.
In the absence of a bachelor's degree, substantial relevant law enforcement, intelligence, or military leadership experience is required and may be considered as a substitute for the degree requirement.
Minimum of ten years of progressively responsible experience across law enforcement, intelligence, military security, force protection, antiterrorism, protective services, investigations, physical security, threat assessment, corporate security investigations or a closely related discipline is required.
Demonstrated experience conducting threat assessments, risk assessments, intelligence analysis, investigations, agency liaison, crisis response or protective planning is required.
Minimum of five years of experience leading programs, personnel, investigations, intelligence activities, governance functions, or cross-functional risk initiatives is required.
Experience briefing senior executives and translating complex threat or risk information into clear business recommendations is required.
Experience working with federal, state, or local law enforcement, intelligence, homeland security, military, regulatory, or industry information-sharing partners is required.
Experience in banking, financial services, critical infrastructure, government, defense, or another highly regulated environment is preferred.
Experience overseeing physical security programs delivered by operational teams or third-party providers is preferred.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Develops, maintains, and executes the enterprise physical security strategy, governance framework, and multi-year program roadmap aligned to the Bank's risk appetite and business priorities.
Establishes and maintains physical security policies, standards, control requirements, and risk assessment criteria, and defines clear roles, decision rights, escalation paths, and accountability between governance and first-line operational teams.
Provides oversight and constructive challenge of physical security operations, control execution, incident management, technology services, and third-party performance without assuming responsibility for daily operations.
Leads enterprise and location-based physical security risk assessments, maintains the physical security risk register, and develops key risk indicators, metrics, and executive reporting to track risks, gaps, remediation, and program effectiveness.
Develops and oversees a protective intelligence and threat management capability, assessing threats involving workplace violence, targeted violence, robbery, civil unrest, insider activity, criminal trends, executives, employees, facilities, and critical operations.
Provides timely, risk-based threat briefings and recommendations to senior leadership and appropriate stakeholders.
Serves as a principal liaison with federal, state, and local law enforcement; intelligence and homeland security partners; fusion centers; and relevant financial-sector information-sharing organizations.
Provides governance and senior advisory support for significant physical security incidents and investigations—coordinating with Legal, Human Resources, Compliance, Risk Management, and operational teams—and sets expectations for evidence preservation, documentation, confidentiality, escalation, and after-action review.
Leads or supports threat assessment and workplace violence prevention governance, including executive and event threat risk assessments and risk-based protective recommendations, with operational execution performed by assigned internal or external providers.
Establishes enterprise requirements and risk-based standards for physical security technologies (access control, video surveillance, intrusion detection, alarm monitoring, visitor management, and duress) and reviews significant technology initiatives, lifecycle risks, and investment priorities from a governance perspective.
Supports compliance with the Bank Protection Act and other applicable regulatory expectations, and coordinates physical security responses for internal audit, external audit, and regulatory examinations, monitoring corrective actions through closure.
Advises enterprise crisis management, emergency preparedness, business continuity, and incident management teams, and supports tabletop exercises, after-action reviews, and program updates following incidents, exercises, or changes in the threat environment.
Provides risk and governance input for physical security vendors and other third parties, including due diligence, contract requirements, service performance, and issue escalation.
Builds collaborative relationships with Branch Operations, Facilities, Human Resources, Legal, Risk, Compliance, Audit, Technology, business leaders, and physical security operations.
Prepares concise executive and board-level reporting on physical security risk, program maturity, significant events, emerging threats, and remediation status, and maintains current professional knowledge of evolving practices.
OTHER REQUIREMENTS:
Banking is a highly regulated industry and you will be expected to acquire and maintain a proficiency in the Bank's policies and procedures, and adhere to all laws, rules and regulations that are applicable to your conduct and the work you will be performing. You will also be expected to complete all assigned compliance training in a timely manner.
Strong knowledge of physical security governance, risk management, threat assessment, protective intelligence, workplace violence prevention, investigations, and crisis management.
Ability to distinguish governance and oversight responsibilities from first-line operational execution and to influence outcomes without relying on direct authority.
Strong written and verbal communication skills, including executive briefings, board-level reporting, policies, standards, risk assessments, and incident summaries.
Ability to evaluate physical security technologies and services from a risk, control, resilience, lifecycle, and regulatory perspective.
Strong relationship-management skills with internal stakeholders, law enforcement, government agencies, service providers, and industry peers.
Ability to manage multiple high-priority matters and make defensible, risk-based decisions under pressure.
Ability to manage or materially contribute to regulatory examinations and audit cycles, including remediation of findings.
Ability to learn new technologies and keep up with industry trends.
Professional demeanor in appearance, interpersonal relations, work ethic and attitude.
Ability to interact effectively across all levels of the organization.
Demonstrated ability to manage multiple priorities and delegate effectively to meet critical deadlines under difficult time restraints.
Understanding of account documentation and retention requirements.
Excellent verbal and written skills and presentation skills with the ability to define and solve problems.
Team player with a positive outlook
Demonstrated leadership ability and skills.
Ability to work independently and meet communicated deadlines.
Excellent analytical, problem-solving and decision-making skills.
Willingness to travel quarterly for onsite meetings.
Bachelor's degree in criminal justice, intelligence studies, security management, homeland security, emergency management, public administration, military science, or a related field is required.
In the absence of a bachelor's degree, substantial relevant law enforcement, intelligence, or military leadership experience is required and may be considered as a substitute for the degree requirement.
Minimum of ten years of progressively responsible experience across law enforcement, intelligence, military security, force protection, antiterrorism, protective services, investigations, physical security, threat assessment, corporate security investigations or a closely related discipline is required.
Demonstrated experience conducting threat assessments, risk assessments, intelligence analysis, investigations, agency liaison, crisis response or protective planning is required.
Minimum of five years of experience leading programs, personnel, investigations, intelligence activities, governance functions, or cross-functional risk initiatives is required.
Experience briefing senior executives and translating complex threat or risk information into clear business recommendations is required.
Experience working with federal, state, or local law enforcement, intelligence, homeland security, military, regulatory, or industry information-sharing partners is required.
Experience in banking, financial services, critical infrastructure, government, defense, or another highly regulated environment is preferred.
Experience overseeing physical security programs delivered by operational teams or third-party providers is preferred.
