­Led by an experienced management team and supported by a strong investor group, including large and experienced institutions and strategic partners, EdgeConneX offers a dynamic, fast-paced work environment where we are bringing flexibility, proximity, power, and connectivity to some of the world’s key businesses. With major offices in Herndon, Denver, Amsterdam, Singapore and Malaysia, we have a global footprint and a unified team of employees committed to providing a premier customer experience and delivering the full spectrum of data center solutions, from core to edge, like no other data center provider can do.

Focused on driving innovation and helping our customers define and deliver their own unique vision for the Edge, at any scale, in any market worldwide, for any requirement, we are building tomorrow’s data center infrastructure, today for some of the world’s most demanding Network, Content, and Cloud customers.

Title: Security Standards, Assurance & Training Manager

Position: Full Time

Location: Ohio or HQ (Herndon, VA)

Travel: Minimum 25% Travel to sites for audit and training delivery, as required

The Security Standards, Assurance & Training Manager owns and operates the EdgeConneX security standards framework, the assurance and audit regime that demonstrates those standards are met, and the training and competency program that equips personnel to deliver them. The role exists to give EdgeConneX a measured, auditable and continuously improving security capability - translating written policy into consistent practice, evidencing that practice to customers, certifiers and leadership, and ensuring every person with a security responsibility is trained and competent to discharge it.

This position sits within Global Security Programs and reports to the Senior Manager, Global Security Programs. This is a hybrid set up where proximity to largest projects or our leadership team will prove valuable. On top of that, there will be a minimum of 25% travel to sites for audit and training delivery that is required. This would be mostly domestic, but occasional travel to EMEA.

Primary Responsibilities

·       Own, maintain and version the corporate security standards framework, ensuring it is consistent, current and benchmarked against recognized standards (e.g. ISO 27001, ISO 22301, SOC 2 and relevant sector resilience frameworks).

·       Translate policy and regulatory requirements into clear, deliverable standards, procedures and control descriptions usable at site and regional level.

·       Govern the document control, review cadence and change-management process for all security standards and procedures.

·       Maintain the control library and map controls to the obligations they satisfy across customers, regulators and certification schemes.

·       Own and operate the internal security assurance program - planning, scheduling and conducting control assessments and audits across sites and functions.

·       Track findings, agree remediation with control owners, and verify closure; report assurance status into the quarterly ELT risk reporting cycle.

·       Act as the single point of coordination for external and customer audits, maintaining audit-ready evidence and managing assessor engagement.

·       Maintain the assurance evidence repository and the schedule of certifications, attestations and renewals.

·       Own the security training and competency framework for security personnel, defining the standards, systems and process competencies required for each security role on site.

·       Deliver on-site training to security personnel on security standards, systems and operational processes; maintain the learning-management capability, training records, refreshers and completion reporting.

·       Run on-site security inductions, awareness and exercise activity, and verify personnel competency through assessment.

·       Feed lessons from incidents, audits and exercises back into standards and training - the continuous improvement loop.

·       Travel to sites for audit and training delivery; other duties as required.

Knowledge, Skills & Abilities

·       Strong written and verbal communication skills, including the ability to translate written policy into clear, deliverable standards and to evidence practice to customers, certifiers and leadership.

·       Working knowledge of recognized security and resilience standards (e.g. ISO 27001, ISO 22301, SOC 2) and how to translate them into deliverable controls at site and regional level.

·       Ability to plan and run an internal assurance and audit program, tracking findings to closure and reporting status to leadership.

·       Ability to deliver on-site training to security personnel on standards, systems and processes, and to design competency frameworks, including records, refreshers and assessment.

·       Sound judgement, discretion and the credibility to hold control owners and vendors to account.

·       Strong organization and document-control discipline, with consistent, audit-ready record-keeping and evidence management.

·       Able to direct staff and coordinate external assessors and training vendors in a fast-moving, distributed environment.

Experience/Education

·       Bachelor's degree in a relevant discipline (security, risk, compliance, business administration or similar), or equivalent vocational experience.

·       Demonstrable experience designing and running an assurance, audit or compliance program in a security, risk or operational environment, with responsibility for managing findings to closure.

·       Experience in the Data Center and/or mission critical infrastructure, including familiarity with customer audit and right-to-audit regimes.

·       Experience delivering on-site security training to personnel on standards, systems and processes, and designing competency frameworks, including records and assessment.

·       Experience directing staff and managing vendors and external assessors.

·       Relevant certification such as Lead Auditor (ISO 27001/22301), CPP, CISA or CRISC, or equivalent assurance or training credentials (desirable).

·       Comfortable working independently across shifting priorities, with clear ownership and consistent execution.