Security Manager Job Description

A Security Manager runs the daily mechanics of keeping a facility and its people safe, which in practice means managing access badges, camera systems, guard schedules, and incident reports with the same rigor as a high-profile crisis response. The title covers a wide range of scope: a single-site corporate campus, a hospital system's guard force, or a specific security technology program at a larger organization.

The work splits across people, technology, and policy. On the personnel side, Security Managers either run a contract guard force through a firm like Allied Universal or Securitas, or lead in-house officers directly. Either way, scheduling, training, performance management, and confirming that officers are actually doing rounds rather than sitting at a post are constant operational tasks, not one-time setup work.

On the technology side, managing access control across a multi-building campus or hospital system means hands-on familiarity with platforms like Lenel OnGuard or Genetec Security Center. When a card reader fails at 2 a.m. or a camera feed drops, the Security Manager is often the person who decides whether to escalate to IT, to the installing vendor, or to handle it directly.

Investigation work is where the job gets serious. A Security Manager at a hospital might handle a patient elopement, a parking lot assault, a controlled-substance diversion, and an employee who won't return a badge after termination, all in the same week. Documenting each case properly protects the organization legally and builds the incident history that justifies future security spending.

At the senior end of the role, Security Managers function as risk advisors. They translate what a facility is exposed to into a business case: which access points need a new reader, which posts need a second officer, which incident pattern justifies a policy change. That advisory function is also the core of the Director and Chief Security Officer roles above it.

The role also touches procurement and vendor governance. Video analytics, license plate recognition, and newer agentic monitoring tools are being pitched directly to security departments, and evaluating what those tools actually do, where they introduce legal or privacy risk, and whether they replace or merely assist a human reviewer is part of the management workload rather than a separate IT decision.

Reporting lines vary by organization. Some Security Managers report into Facilities or Operations, treated as one more building system to keep running. Others report into Legal, HR, or a Chief Security Officer, treated primarily as a risk function. Neither structure is universally right, but a manager who understands which one applies at their organization can shape how much authority they actually have over budget, staffing, and policy versus how much is negotiated case by case with whichever department controls the purse strings.

Education

• A bachelor's degree in criminal justice, security management, business, or a related field is standard for corporate security roles.
• An associate degree paired with extensive operational security experience is accepted at many employers, particularly outside large corporate headquarters.
• Military or law enforcement careers often substitute for a formal degree, especially in government and defense-adjacent organizations.

Certifications

• Certified Protection Professional (CPP), ASIS International's flagship credential and a widely recognized manager-level certification in the field.
• Physical Security Professional (PSP), a more technical ASIS credential focused on systems design and assessment.
• Certified Healthcare Protection Administrator (CHPA) from IAHSS, a credential focused on healthcare security leadership.
• FEMA IS-100, IS-200, and IS-700, useful wherever the role touches emergency management coordination.

Technical knowledge

• Access control platforms: Lenel OnGuard, Software House C-CURE, Genetec Security Center, Honeywell Pro-Watch.
• Video management systems: Milestone XProtect, Avigilon Control Center, Genetec Omnicast.
• Incident management software: Omnigo, Resolver, or an equivalent case-management platform.
• ASIS International standards, including Physical Asset Protection and its General Security Risk Assessment Guideline.

What sets candidates apart

• Demonstrated budget management: vendor contracts, technology upgrades, and capital planning, not just staffing schedules.
• A documented track record on workplace violence threat assessment cases, ideally as a named member of a Threat Assessment Team.
• Cross-functional credibility with HR, Legal, IT, and Facilities leadership, since almost every serious incident touches at least two of those departments.
• Working knowledge of IP networking and basic cybersecurity concepts, since access control and video systems now live on the same network as everything else the organization runs.

How employers weigh experience against credentials Postings for the role typically list a bachelor's degree and several years of security or law enforcement experience, and employers can weigh one against the other. A candidate with a decade of military police experience and no degree can compete with a criminal justice graduate who has five years of corporate guard-force supervision, provided both can show the specific skills the role needs: budget ownership, vendor management, and a clean record handling sensitive investigations. The CPP exists partly to standardize that comparison, since it requires documented years of experience regardless of degree path and tests the same body of knowledge across every candidate who sits for it. Employers hiring for healthcare or campus settings may ask about experience with behavioral threat assessment specifically, not just general security supervision, since much of the role in those settings involves people risk as well as perimeter risk.

Security Manager isn't tracked as its own line item in federal labor statistics; the closest O*NET occupational match, Security Managers (11-3013.01), rolls up into the Bureau of Labor Statistics' broader Facilities Managers category (SOC 11-3013), which reported a May 2025 median wage of $106,660 nationally. That umbrella includes building-operations managers who do no security work at all, so it's context for where security-adjacent management pay sits, not a substitute for a role-specific figure.

What is clear from role-specific sources is that pay varies enormously by employer scope. One public employer's example, Bernalillo County's Security Manager classification, tops out under $110,000. In the Foushee Group/ScottMadden 2025 compensation survey published in Security Magazine, large-enterprise averages for mid-level security management titles run from roughly $154,000 to $245,000 in base pay plus bonus. The job title covers both ends of that range and everything between, depending on how many sites, how much budget, and how much executive exposure the role carries.

Healthcare security is a distinct segment for this title. Hospital security departments deal directly with concern about violence against staff, and managers in that setting often carry responsibilities specific to it, such as patient elopement, behavioral threat cases, and coordination with clinical leadership on staff safety.

Technology convergence affects day-to-day responsibilities. Physical security and cybersecurity, often run by separate teams, share infrastructure: access control data rides on the same IP network as everything else, and a network outage or intrusion can take down badge readers along with email. AI skills for security roles were on the program at ASIS International's GSX 2026 conference. Vendors such as Ambient.ai now market agentic video tools that link camera feeds with access logs. For the Security Manager, that shifts part of the job toward evaluating and governing these systems rather than replacing the human judgment calls an incident still requires.

The established career path runs from Security Manager to Security Director to VP of Corporate Security or Chief Security Officer, and the CPP credential is aimed at professionals on that track.

Standalone Security Manager roles are common at large employers: financial services and pharmaceutical headquarters, major hospital systems, and higher-education campuses with their own sworn or contract police departments. Smaller organizations may fold the Security Manager's duties into a Facilities or Risk Management title rather than carrying it as a standalone role, which is one reason the title is hard to separate out in national labor statistics.

Dear Hiring Manager,

I'm applying for the Security Manager position at [Organization]. I've spent seven years in corporate security, the last four as a security supervisor at [Employer], a 1.2-million-square-foot distribution facility with 800 employees across three shifts.

In that role I managed a 12-officer guard force, a mix of proprietary and contract personnel, owned the access control system on Lenel OnGuard, and handled every incident investigation from cargo theft to medical emergencies. We reduced external theft incidents by 34% over two years by reworking perimeter camera coverage, installing vehicle barriers at two loading dock gaps, and implementing a randomized vehicle search program. Getting that last program approved required working with HR and Legal to get the policy right before deployment, which taught me more about cross-functional coordination than any training course has.

I completed my CPP last year and brought my FEMA ICS certifications current through ICS-400 in anticipation of moving into a full management role.

The multi-site scope of [Organization]'s security program is what interests me most. Maintaining consistent security standards across facilities with different risk profiles is the challenge I've been building toward, and I have direct experience running video surveillance across geographically separated buildings and setting standardized post orders that still flex for local conditions.

Beyond the day-to-day operations, I've spent the last year building the reporting package our regional director uses to justify security capital requests, translating incident data into the kind of business case finance actually approves. That's the piece of the Security Manager role I want more of: not just running the program, but making the argument for what it needs next.

I'd welcome the chance to discuss how my background fits what you're looking for.

[Your Name]