Director, Security Services

ADI Global•Melville, NY

12d•$197,609 - $368,522•Hybrid

About The Position

The Director of Security Services is a senior leadership role responsible for delivering and scaling security capabilities across a complex distribution and digital commerce environment. This role leads three core functions: Enterprise & Product Security Architecture (including cloud), Product Security (DevSecOps), and Security Assurance. In a distribution business, this leader ensures the protection of supply chain systems, eCommerce platforms, product integrations, and partner ecosystems while enabling business growth, operational efficiency, and digital transformation. The Director will embed security into commercial platforms, customer-facing applications, logistics systems, and cloud infrastructure, balancing risk management with speed and scalability.

Requirements

10+ years of cybersecurity experience, with 5+ years in a leadership role
Experience operating security programs in distribution, manufacturing, retail, or supply chain-driven environments
Proven leadership across security architecture, application/product security, and assurance functions
Strong expertise in securing cloud environments (AWS, Azure, or GCP) and hybrid infrastructures
Experience securing eCommerce platforms, APIs, and high-volume transaction systems
Familiarity with third-party risk and supply chain security challenges
Deep understanding of frameworks such as NIST, ISO 27001, CIS, and OWASP
Ability to align security strategy with operational uptime, customer experience, and revenue protection

Nice To Haves

Experience in low-voltage distribution, industrial distribution, wholesale, or adjacent industries
Background supporting ERP (e.g., SAP), WMS, CRM, and digital commerce platforms
Experience with B2B integrations, EDI, and partner-facing APIs
Familiarity with Zero Trust models and identity-first security approaches
Experience securing OT/IoT or warehouse technologies (e.g., scanners, automation systems)
Hands-on technical background in engineering, cloud, or infrastructure
Relevant certifications (e.g., CISSP, CISM, CCSP, cloud security certifications)

Responsibilities

Define and execute a security services strategy aligned to distribution operations, digital commerce growth, and enterprise risk priorities
Partner with business leaders across supply chain, procurement, sales, eCommerce, and IT to integrate security into core operations
Build and lead high-performing teams across architecture, product security, and assurance
Establish actionable security metrics tied to business risk, uptime, and customer trust
Define and enforce secure architecture standards across ERP systems, warehouse management systems (WMS), eCommerce platforms, APIs, and cloud infrastructure
Lead the design of secure solutions for B2B integrations, supplier connectivity, and third-party platforms
Oversee cloud security strategy across SaaS, IaaS, and PaaS environments (e.g., Azure, AWS), including identity, access, data protection, and network security
Establish secure-by-design patterns for digital commerce, mobile apps, and customer portals
Support modernization initiatives, including legacy system transformation and platform consolidation
Build and scale a developer-centric product security program integrated into the SDLC for internal and customer-facing platforms
Implement controls for secure API development, eCommerce applications, and third-party integrations
Lead practices such as threat modeling, secure code review, SAST/DAST, open-source risk management (SCA), and container security
Enable DevSecOps by integrating security into CI/CD pipelines supporting digital platforms and operational systems
Partner with engineering teams to secure high-availability and transaction-heavy systems
Establish a comprehensive security assurance program covering: Vulnerability management across enterprise, warehouse, and edge environments, Penetration testing of eCommerce platforms and external-facing services, Control validation for critical systems supporting order processing, logistics, and financial transactions
Ensure adherence to regulatory, contractual, and partner-driven security requirements
Lead risk-based assessments for third-party vendors, suppliers, and integration partners
Develop reporting that clearly communicates risk posture, remediation progress, and operational impact
Define and implement security standards for vendor onboarding, supplier integrations, and third-party platforms
Assess and manage risks across a broad ecosystem of manufacturers, logistics providers, and technology partners
Embed security into digital supply chain processes and data exchanges
Collaborate with IT, engineering, product, operations, and compliance teams to deliver integrated security outcomes
Support incident response and resilience for distribution operations and customer-facing systems
Promote a culture of security ownership across technical and operational teams