Senior Physical Security Architect — Cloud-Based Program Lead

Topstep LLC; Chicago (IL); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Company-paid holidays

Family leave

401(k) matching

Health, dental & vision insurance

Vacation bonus for 5 consecutive days

Job summary

Topstep LLC is seeking a Physical Security Manager to lead a scalable, tech-driven protection program across our multi-city footprint. You will own the full lifecycle—from risk assessments and vendor selection to implementing enterprise-grade access control and visitor management systems.

The role requires executive protection, PSRA audits (SOC2/PCI/ISO), tabletop exercises, and developing a culture of security. Travel once per quarter is expected.

Qualifications

• 8+ years in corporate security with scalable programs in tech or finance.
• Expert in enterprise-grade ACS and VMS, integrated with HRIS/IdP.
• Experience with SOC2 Type II, PCI-DSS, or ISO 27001 audits.
• Strong executive protection & risk/threat assessment capabilities.
• Ability to conduct tabletop exercises for senior leadership.

Responsibilities

• System Implementation & Operationalization: deploy cloud-based ACS and VMS across 5 offices.
• Hardening & Risk Assessment: perform PSRA and mitigate vulnerabilities.
• Emergency Preparedness: author EAPs, run tabletop exercises and training.
• Asset Protection & Disposal: secure and destroy sensitive data and IT hardware.
• Security Culture & Awareness: launch anti-tailgating program and improve security culture.
• Executive Protection & Threat Assessment: bespoke risk profiles for ET members.

Skills

Access Control

VMS

Risk Assessment

Executive Protection

Threat Assessment

Tabletop Exercises

Vendor Management

Zero-Trust Security

Security Metrics

C-Suite Communication

Tools

Cloud-based ACS

HRIS Integration

Identity Providers

Job description

Topstep LLC is seeking a Physical Security Manager to lead a scalable, tech-driven protection program across our multi-city footprint. You will own the full lifecycle—from risk assessments and vendor selection to implementing enterprise-grade access control and visitor management systems.

The role requires executive protection, PSRA audits (SOC2/PCI/ISO), tabletop exercises, and developing a culture of security. Travel once per quarter is expected.