Director, Security Services

About the role

The Director of Security Services is a senior leadership role responsible for delivering and scaling security capabilities across a complex distribution and digital commerce environment. This role leads three core functions: Enterprise & Product Security Architecture (including cloud), Product Security (DevSecOps), and Security Assurance.

In a distribution business, this leader ensures the protection of supply chain systems, eCommerce platforms, product integrations, and partner ecosystems while enabling business growth, operational efficiency, and digital transformation.

Responsibilities

• Define and execute a security services strategy aligned to distribution operations, digital commerce growth, and enterprise risk priorities
• Partner with business leaders across supply chain, procurement, sales, eCommerce, and IT to integrate security into core operations
• Build and lead high-performing teams across architecture, product security, and assurance
• Establish actionable security metrics tied to business risk, uptime, and customer trust
• Define and enforce secure architecture standards across ERP systems, warehouse management systems (WMS), eCommerce platforms, APIs, and cloud infrastructure
• Lead the design of secure solutions for B2B integrations, supplier connectivity, and third-party platforms
• Oversee cloud security strategy across SaaS, IaaS, and PaaS environments (e.g., Azure, AWS), including identity, access, data protection, and network security
• Support modernization initiatives, including legacy system transformation and platform consolidation
• Build and scale a developer-centric product security program integrated into the SDLC for internal and customer-facing platforms
• Implement controls for secure API development, eCommerce applications, and third-party integrations
• Enable DevSecOps by integrating security into CI/CD pipelines supporting digital platforms and operational systems
• Partner with engineering teams to secure high-availability and transaction-heavy systems
• Establish a comprehensive security assurance program covering: Vulnerability management across enterprise, warehouse, and edge environments, Penetration testing of eCommerce platforms and external-facing services, Control validation for critical systems supporting order processing, logistics, and financial transactions, Ensure adherence to regulatory, contractual, and partner-driven security requirements, Lead risk-based assessments for third-party vendors, suppliers, and integration partners, Develop reporting that clearly communicates risk posture, remediation progress, and operational impact
• Define and implement security standards for vendor onboarding, supplier integrations, and third-party platforms
• Assess and manage risks across a broad ecosystem of manufacturers, logistics providers, and technology partners
• Embed security into digital supply chain processes and data exchanges
• Cross-Functional Collaboration
• Collaborate with IT, engineering, product, operations, and compliance teams to deliver integrated security outcomes
• Support incident response and resilience for distribution operations and customer-facing systems
• Promote a culture of security ownership across technical and operational teams

Requirements

• 10+ years of cybersecurity experience, with 5+ years in a leadership role
• Proven leadership across security architecture, application/product security, and assurance functions
• Strong expertise in securing cloud environments (AWS, Azure, or GCP) and hybrid infrastructures
• Experience securing eCommerce platforms, APIs, and high-volume transaction systems
• Familiarity with third-party risk and supply chain security challenges
• Deep understanding of frameworks such as NIST, ISO 27001, CIS, and OWASP
• Ability to align security strategy with operational uptime, customer experience, and revenue protection

Qualifications

• Experience in low-voltage distribution, industrial distribution, wholesale, or adjacent industries
• Background supporting ERP (e.g., SAP), WMS, CRM, and digital commerce platforms
• Experience with B2B integrations, EDI, and partner-facing APIs
• Familiarity with Zero Trust models and identity-first security approaches
• Experience securing OT/IoT or warehouse technologies (e.g., scanners, automation systems)
• Hands-on technical background in engineering, cloud, or infrastructure
• Relevant certifications (e.g., CISSP, CISM, CCSP, cloud security certifications)

Benefits

• Comprehensive benefits, including life and health insurance, life assistance program, accidental death and dismemberment insurance, disability insurance, 401k Plan, vacation & holidays