Director, Security Services

The Director of Security Services is a senior leadership role responsible for delivering and scaling security capabilities across a complex distribution and digital commerce environment. This role leads three core functions:
Enterprise & Product Security Architecture (including cloud), Product Security (Dev Sec Ops ), and Security Assurance.

• Define and execute a security services strategy aligned to distribution operations, digital commerce growth, and enterprise risk priorities.
• Partner with business leaders across supply chain, procurement, sales, eCommerce, and IT to integrate security into core operations.
• Build and lead high‑performing teams across architecture, product security, and assurance.
• Establish actionable security metrics tied to business risk, uptime, and customer trust.

• Define and enforce secure architecture standards across ERP systems, warehouse management systems (WMS), eCommerce platforms, APIs, and cloud infrastructure.
• Lead the design of secure solutions for B2B integrations, supplier connectivity, and third‑party platforms.
• Oversee cloud security strategy across SaaS, IaaS, and PaaS environments (Azure, AWS, GCP), including identity, access, data protection, and network security.
• Establish secure‑by‑design patterns for digital commerce, mobile apps, and customer portals.
• Support modernization initiatives, including legacy system transformation and platform consolidation.

• Build and scale a developer‑centric product security program integrated into the SDLC for internal and customer‑facing platforms.
• Implement controls for secure API development, eCommerce applications, and third‑party integrations.
• Lead practices such as threat modeling, secure code review, SAST/DAST, open‑source risk management (SCA), and container security.
• Enable Dev Sec Ops  by integrating security into CI/CD pipelines supporting digital platforms and operational systems.
• Partner with engineering teams to secure high‑availability and transaction‑heavy systems.

• Establish a comprehensive security assurance program covering vulnerability management, penetration testing, and control validation for critical systems.
• Ensure adherence to regulatory, contractual, and partner‑driven security requirements.
• Lead risk‑based assessments for third‑party vendors, suppliers, and integration partners.
• Develop reporting that clearly communicates risk posture, remediation progress, and operational impact.

• Define and implement security standards for vendor onboarding, supplier integrations, and third‑party platforms.
• Assess and manage risks across a broad ecosystem of manufacturers, logistics providers, and technology partners.
• Embed security into digital supply chain processes and data exchanges.

• Collaborate with IT, engineering, product, operations, and compliance teams to deliver integrated security outcomes.
• Support incident response and resilience for distribution operations and customer‑facing systems.
• Promote a culture of security ownership across technical and operational teams.

• 10+ years of cybersecurity experience, with 5+ years in a leadership role.
• Experience operating security programs in distribution, manufacturing, retail, or supply‑chain‑driven environments.
• Proven leadership across security architecture, application/product security, and assurance functions.
• Strong expertise in securing cloud environments (AWS, Azure, or GCP) and hybrid infrastructures.
• Experience securing eCommerce platforms, APIs, and high‑volume transaction systems.
• Familiarity with third‑party risk and supply‑chain security challenges.
• Deep understanding of frameworks such as NIST, ISO 27001, CIS, and OWASP.
• Ability to align security strategy with operational uptime, customer experience, and revenue protection.

• Experience in low‑voltage distribution, industrial distribution, wholesale, or adjacent industries.
• Background supporting ERP (SAP), WMS, CRM, and digital commerce platforms.
• Experience…