Head of Corporate Security

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 
 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Position Overview

The Head of Corporate Security is a strategic leadership role accountable for protecting the company's people, executives, facilities, and reputation. This leader sets the enterprise policies and standards that govern Physical Security and Travel Security, and provides independent oversight to confirm that the teams operating those programs meet them. The role directly owns the Executive Protection program end to end, covering risk assessment, protective operations, vendor management, and budget. Working across Workplace/Real Estate, Travel, HR, Legal, Communications, Information Security, and Enterprise Resilience, this leader moves corporate security from reactive incident response to an intelligence-led, risk-based discipline. The role has authority to escalate material security risks to executive leadership and to require remediation when programs fall short of enterprise standards.

Ownership Model

·Physical Security (Policy, Standards & Oversight): Sets enterprise physical security policy and minimum standards; Workplace/Facilities and site teams own day-to-day operations, guard services, and system administration.

·Travel Security (Policy, Standards & Oversight): Sets travel risk policy, risk ratings, and approval requirements; Corporate Travel and the travel risk provider own booking, traveler tracking, and assistance delivery.

·Executive Protection (Ownership & Oversight): Owns program strategy, operations, staffing and vendors, budget, and performance for the protection of designated executives and the Board.

Key Responsibilities

Corporate security strategy: Define and run a multi-year corporate security strategy and operating model aligned to enterprise risk appetite, business growth, and the company's global footprint.

Physical security policy and standards: Establish and maintain enterprise physical security policies and tiered site standards (access control, video surveillance, visitor management, alarm monitoring, guard services, secure areas) aligned with the ASIS Physical Asset Protection standard and industry best practice.

Physical security oversight: Provide independent oversight of site security programs operated by Workplace/Facilities through site risk assessments, compliance reviews, and control testing. Approve security design requirements for new sites, renovations, and major events.

Travel risk policy and standards: Own the enterprise travel risk management policy, aligned with ISO 31030, including destination risk ratings, high-risk travel approval, pre-travel briefings, traveler tracking requirements, and medical/security assistance and evacuation standards.

Travel program oversight: Oversee the travel risk program delivered by Corporate Travel and third-party providers. Monitor compliance, provider performance, and incident response, and confirm duty-of-care obligations are met for employees, contractors, and accompanying travelers.

Executive protection program ownership: Build and lead the Executive Protection program for the CEO, designated executives, and Board members, including individual risk and needs assessments, protective coverage levels, residential security assessments, secure transportation, and event and travel advance work.

Protective intelligence: Run protective intelligence and threat assessment for executives and the company, including monitoring of online threats and exposure of executives' personal information, behavioral threat assessment, and coordination with law enforcement on threats of concern.

Executive protection vendor and budget management: Select, contract, and manage protective services, secure transport, and intelligence vendors. Own program budget, performance metrics, and cost-to-risk justification, including support for compensation committee and proxy disclosure of security benefits.

Security risk assessment: Conduct enterprise security risk assessments that establish baselines, rank risks across sites, travel destinations, and individuals, and drive risk-based allocation of resources.

Incident and crisis management: Serve as the corporate security lead within enterprise crisis management for workplace violence, civil unrest, terrorism, natural disasters, and threats to executives. Integrate with Business Continuity and Enterprise Resilience plans.

Workplace violence prevention: Set the workplace violence prevention policy and lead the cross-functional threat management team with HR, Legal, and Employee Relations.

Policy lifecycle management: Manage the full corporate security policy lifecycle (development, approval, communication, exceptions, and periodic review) and maintain a control framework that supports audit and customer assurance requests.

Governance, metrics, and reporting: Define KPIs and KRIs for physical, travel, and executive security. Deliver executive and Board-level reporting that translates security risk into clear business decisions.

Government and law enforcement liaison: Serve as the company's primary point of contact with federal, state, local, and international law enforcement and government agencies (e.g., FBI, DHS/CISA, U.S. Secret Service, State Department Diplomatic Security Service/OSAC). Manage threat information sharing, incident referrals, and protective intelligence coordination in partnership with Legal and Information Security, and maintain clear protocols for agency engagement and requests.

Industry partnerships: Represent the company in industry and peer security forums such as OSAC, ASIS, the Security Executive Council, and relevant ISACs to benchmark practices and share threat information.

Exercise and continuous improvement: Govern a security exercise program (executive protection drills, site emergency exercises, traveler crisis scenarios) and drive lessons learned and post-incident reviews into improvements.

Required Skills & Qualifications

Security leadership experience: 15+ years of progressive experience in corporate security, executive protection, or security risk management in a complex global enterprise.

Program leadership: 8+ years leading enterprise security programs, with direct accountability for an executive protection program and for policy-setting authority over physical security and travel security.

Executive protection expertise: Proven experience designing and operating protective programs for C-suite executives and Boards, including advance work, secure transportation, residential security, and protective intelligence.

Standards knowledge: Strong working knowledge of ASIS standards (Physical Asset Protection, Security Risk Assessment, Workplace Violence Prevention, Executive Protection), ISO 31030 travel risk management, and ISO 31000 risk management principles.

Oversight and assurance: Track record of governing programs run by other functions or vendors through standards, assessments, metrics, and remediation tracking.

Threat assessment: Experience in behavioral threat assessment, protective intelligence, and crisis and incident command.

Regulatory and legal awareness: Understanding of duty-of-care obligations, privacy and surveillance laws across jurisdictions, and SEC disclosure considerations for executive security.

Agency relationships: Established working relationships with federal law enforcement and government agencies (FBI, DHS/CISA, USSS, DSS/OSAC) and experience coordinating threat referrals and investigations with them. Ability to obtain and maintain a U.S. government security clearance preferred.

Global operations: Experience managing security risk across multiple regions, including high-risk travel and international incident response.

Technology proficiency: Familiarity with physical security technologies (PACS, VMS, GSOC tooling), travel risk platforms, and threat intelligence and GRC tools.

Executive presence: Ability to advise the CEO, executive leadership, and the Board with discretion, sound judgment, and clear, data-driven narratives.

Education: Bachelor's degree required; Master's degree in security management, criminal justice, business, or related field preferred. Equivalent law enforcement, military, or government protective service experience considered.

Certifications: CPP required or obtained within 12 months; PSP, CTM, CEPP, or equivalent preferred.

Desired Attributes

·Trusted advisor who exercises absolute discretion with sensitive executive and personal information.

· Risk-based thinker who matches protective measures to the threat and keeps them proportionate, cost-effective, and supportive of the business.

·Independent overseer who holds partner functions accountable to standards while building strong, collaborative relationships.

·Calm, decisive leader under pressure during crises and fast-moving incidents.

·Builder and team developer who can scale a program and develop high-performing security professionals.

·Continuous learner who stays ahead of evolving threats, protective practices, and industry standards.

Impact of the Role

This role establishes Corporate Security as a strategic, risk-based function that protects the company's most important assets: its people, its leaders, and its reputation. By setting clear standards for physical and travel security, holding operating teams accountable to them, and directly leading a professional Executive Protection program, the Head of Corporate Security makes sure the company can operate, travel, and grow with confidence. The position directly affects employee safety and duty-of-care obligations, leadership continuity, and stakeholder trust, and positions the enterprise as a leader in modern corporate security over the next decade.

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

The annual base pay for this position is: $231,400.00 - $347,200.00

F5 maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, geographic locations, and market conditions, as well as to reflect F5’s differing products, industries, and lines of business. The pay range referenced is as of the time of the job posting and is subject to change.

You may also be offered incentive compensation, bonus, restricted stock units, and benefits. More details about F5’s benefits can be found at the following link: https://www.f5.com/company/careers/benefits. F5 reserves the right to change or terminate any benefit plan without notice. 

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com).

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.  F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com.