Physical Security Risk & Policy Architect

ADRM; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Job summary

ADRM is a leading physical security consulting firm helping clients strengthen security posture across Financial Services, Biotech, Critical Infrastructure, Higher Education, and Tech sectors. The Physical Security Risk & Policy Architect will develop and refine policies, assess risks, and guide security programs for diverse client environments.

The role emphasizes collaboration with client stakeholders and rigorous analysis.

Qualifications

• Bachelor's degree in Security Management, Risk Management, Criminal Justice, Emergency Management, related field, or equivalent professional experience preferred
• 5+ years of hands-on experience conducting security risk assessments and developing security policy for enterprise or institutional environments
• Certification(s) such as CPP, PSP, CISSP, or other recognized security or risk management credentials preferred
• Experience with security design and physical security system specification is a plus
• Strong familiarity with regulatory and compliance frameworks (e.g., NIST, ISO 27001, ASIS standards) relevant to physical security
• Strong working knowledge of threat and vulnerability assessment methodologies, security audits, and gap analysis
• Demonstrated ability to manage multiple client engagements, assessment timelines, and deadlines with precision and calm
• Excellent written and verbal communication skills - you can translate technical complexity for non-technical stakeholders
• Ability to work independently and as part of a collaborative, distributed team
• Boston metro area preferred; ability to travel to client sites as needed for assessments and site visits

Responsibilities

• Lead development, evaluation, and continuous improvement of security policies and risk assessment programs for clients across demanding environments
• Partner daily with client stakeholders, security leadership, and operations to identify vulnerabilities and design policies
• Translate technical security concepts for non-technical stakeholders and manage multiple engagements
• Coordinate assessment timelines and deliverables with distributed teams

Skills

Security risk assessments

Security policy development

Regulatory frameworks (NIST ISO 27001)

Threat and vulnerability assessment

Office 365 familiarity

GRC platforms familiarity

Written and verbal communication

Project management

Education

Bachelor's degree in Security Management or related field

CPP/PSP/CISSP certifications preferred

Tools

Office 365

GRC platforms

Job description

DescriptionAbout ADRMADRM

is a leading physical security consulting firm with a bold vision to be the most trusted security firm in the industry. We disrupt the security landscape through data-driven risk management, safeguarding critical assets for clients in Financial Services, Bio-Tech, Critical Infrastructure, Higher Education, and Technology & Cloud Infrastructure. Our work is guided by six core values - Balance, Curiosity, Integrity, Respect, Team, and Trust - and backed by a team that is passionate about protecting what matters most. We move fast, we care deeply, and we do it together.

The Opportunity

As a Physical Security Risk & Policy Architect at ADRM, you will lead the development, evaluation, and continuous improvement of security policies and risk assessment programs for clients across some of the most demanding environments in the country. You will partner daily with client stakeholders, security leadership, and operational teams to identify vulnerabilities, evaluate risk, and design policies that strengthen security posture. You bring analytical rigor and a consultative mindset.

Requirements

What You'll Bring

• Bachelor's degree in Security Management, Risk Management, Criminal Justice, Emergency Management, related field, or equivalent professional experience preferred


• 5+ years of hands-on experience conducting security risk assessments and developing security policy for enterprise or institutional environments


• Certification(s) such as CPP, PSP, CISSP, or other recognized security or risk management credentials preferred


• Experience with security design and physical security system specification is a plus


• Strong familiarity with regulatory and compliance frameworks (e.g., NIST, ISO 27001, ASIS standards) relevant to physical security


• Strong working knowledge of threat and vulnerability assessment methodologies, security audits, and gap analysis


• Experience with Office 365 and enterprise risk management or GRC platforms


• Demonstrated ability to manage multiple client engagements, assessment timelines, and deadlines with precision and calm


• Excellent written and verbal communication skills - you can translate technical complexity for non-technical stakeholders


• Ability to work independently and as part of a collaborative, distributed team


• Boston metro area preferred; ability to travel to client sites as needed for assessments and site visits

Why ADRM

• Be part of a forward-thinking firm that is actively reshaping how organizations think about physical security


• Work alongside a team of experienced professionals who take their craft seriously and support each other


• ADRM covers 100% of health, dental, and vision insurance premiums for team members AND their dependents - one of the most comprehensive benefits packages in the industry


• Robust 401(k) plan with a generous company match and profit sharing


• A culture built on Balance, Integrity, and Trust - not just words on a wall


• Real opportunity to grow: ADRM is scaling quickly, and we promote from within

At ADRM, we believe diverse perspectives make us stronger. We're committed to creating an inclusive environment where every team member can contribute and grow.