Senior Data Center Security Site Evaluation Program Manager

Weights & Biases Weights & Biases · Data AI · Bellevue, WA +6 · Data Center - COR

This role focuses on physical security due diligence for new data center site selections, ensuring security risks and mitigations are integrated into contracts, designs, and operations. It involves conducting risk assessments, collaborating with various teams (Site Selection, Legal, Security Design/Operations), and monitoring evolving threat landscapes. The goal is to ensure all new sites align with established security standards and organizational expectations.

What you'd actually do

  1. Drives new site selection physical security due diligence and initial risk evaluation.
  2. Ensures that security risks and mitigations for new locations are integrated into contractual requirements, designs, controls, and operational workflows, ensuring that every site aligns with established security standards, audit requirements, and CoreWeave’s organizational expectations.
  3. Execute Risk and Assurance assessment activities for our data centers and associated facilities, partnering closely with Site Selection, Legal/Contracting, Security Design and Operations to ensure risks are mitigated.
  4. Conduct physical security due diligence for site selection, ensuring appropriate security requirements are included in Master Service Agreements and other lease contracts, collaborating with Site Selection and Legal teams.
  5. Conduct operational DC security risk assessments.

Skills

Required

  • 5+ years of experience in physical security program management, contracts management, security risk management, compliance, or assurance functions
  • Understanding of physical security controls and risk frameworks (e.g. ISO 27001, SOC 2)
  • Understanding of security systems and data center security operations
  • Demonstrated ability to translate security concepts into actionable business insights and governance structures
  • Excellent communication, influencing, and cross-functional collaboration skills

Nice to have

  • Ideally within data center or critical infrastructure environments
  • Relevant certifications or on-the-job experience (e.g. PSP, CPP, ISO 27001 Lead Auditor) preferred

What the JD emphasized

  • physical security due diligence
  • risk evaluation
  • security risks and mitigations
  • contractual requirements
  • security standards
  • audit requirements
  • organizational expectations
  • Risk and Assurance assessment activities
  • Site Selection
  • Legal/Contracting
  • Security Design and Operations
  • physical security controls
  • risk frameworks
  • security systems
  • data center security operations