Director, Enterprise Physical Security

Position Purpose

The Director of Enterprise Physical Security assists with the development and leadership of Encompass Health Corporation's enterprise physical security function. This is a foundational role responsible for aiding in defining the strategy, governance framework, and operating model that protect people, assets, and infrastructure across corporate offices, rehabilitation hospitals, and active construction projects.

Responsibilities & Tasks

• Assists in defining and executing a risk-based physical security and safety strategy that encompasses enterprise-wide governance, security policies, standards, procedures, compliance requirements, and KPIs
• Maintains relationships with federal, state, and local law enforcement agencies within the EHC operational footprint to ensure effective and efficient response to physical security threats
• Ensures physical security operations are conducted in compliance with federal, state and local regulations
• Develops and operates security programs for the corporate office, rehabilitation hospitals, and construction sites (access control, surveillance, intrusion detection, visitor management, mail/package screening)
• Manages executive protection, travel security, workplace violence prevention, and geopolitical risk monitoring programs
• Powers with construction and real estate teams to embed security into facility design, construction, and commissioning
• Establishes the enterprise physical security governance framework, including standards and compliance controls aligned with SOC 2 Type II, ISO 27001/27002, NIST 800-53, PCI-DSS, and customer requirements for data center physical security
• Powers with the Encompass Health Corporate Safety & Security Committee and third-party security providers to ensure year-round secure operations and compliance readiness
• Develops and operates enterprise security technology including a Physical Security Operations Center (PSOC) for 24/7 monitoring, alerting, and response across corporate, hospital, and new construction facilities with defined escalation and coordination protocols
• Works with all departments to develop policies and procedures for using physical security and security equipment including Data Loss Prevention, Forensics, EnCase and eDiscovery requirements
• Conducts internal investigations as required in partnership with EHC Legal and HR organizations
• Reviews quotes and product recommendations to help hospitals obtain physical security equipment
• Develops corporate facility emergency procedures and contributes to enterprise business continuity and disaster recovery planning from a physical security perspective for the corporate campus and hospitals
• Led physical security incident response, escalation, investigation, and after-action reporting for corporate environments, and coordinates cross-site incident protocols with security leadership
• Compiles trending reports for security events to find anomalous activity warranting investigation
• Organizes, plans, and manages time effectively to complete assignments and mandatory training

Qualifications

• Bachelor's or Master's degree required in security management, criminal justice, business administration, or a related field
• 10+ years of experience in physical security and safety management, with 5+ years in leadership roles overseeing global or multi-site programs
• Strong background in risk assessment, threat analysis, crisis management, executive protection, travel security, and business continuity
• Expertise in physical security technologies (ACS, VSS, IDS) and compliance frameworks (SOC 2, ISO 27001, NIST 800-53)
• Prior experience in military, law enforcement, or intelligence with corporate security leadership experience preferred
• Experience integrating security into facility design, construction, and commissioning processes preferred
• Proven ability to build and scale security organizations in high-growth environments preferred

Skills And Abilities

• Oral and written communication skills with the ability to articulate risk, strategy, and ROI to senior leaders and external stakeholders
• Must be able to speak and understand English
• Information ordering, deductive reasoning, social perceptiveness, time management, critical thinking
• Able to coordinate, analyze, observe, make decisions, and meet deadlines in a detail-oriented manner
• Able to work independently without continuous supervision
• Be familiar with a wide range of concepts and practices in the security field
• Able to work well under pressure and during emergency situation
• Technology Skills: High level of Symantic Data Loss prevention operational experience EnCase and eDiscovery operational experience Data forensics collection and analysis operational experience