Vice President - IT Security & Operations-Corporate IT

Vice President - IT Security & Operations-Corporate IT

KDC is a network of best-in-class custom formulators and manufacturers of color cosmetics, skincare, haircare, bath & body, fragrance, deodorant, home, health, industrial, and auto care products. KDC delivers high-touch innovation, operational excellence, and speed to market to well-known and emerging beauty, personal, and specialty companies from coast to coast. KDC has its head office in Longueuil, Québec. In addition, KDC has 10 operating facilities located throughout North America. Altogether, the company employs nearly 4,800 talented and dedicated employees in North America.

Position Summary:

The VP IT Security and Operations is a key leadership role responsible for setting the vision and direction for IT security and operations across the organization. This role involves the development and implementation of strategic plans to ensure the organization's security and operational excellence. The VP will lead a team responsible for safeguarding the company's information assets, ensuring infrastructure performance, and maintaining the continuity of critical operations. This position requires a strategic thinker with deep technical knowledge and strong leadership skills to drive initiatives that align with the company's goals.

Key Responsibilities/Accountabilities

Strategic Leadership and Planning

• Define and drive the IT security and operations strategy in alignment with organizational goals.
• Act as advocate and primary liaison for the company’s security vision via regular written and in-person communications with key stakeholders, KDC executives, department heads, and end users regarding pertinent security and infrastructure activities.
• Define and communicate corporate plans, procedures, policies, and standards for the organization for acquiring, implementing, and operating new security and operating systems, equipment, software, and other technologies.
• Lead strategic security and operational planning to achieve business goals by prioritizing initiatives and coordinating the evaluation, deployment, and management of current and future technologies.
• Plan and ensure proper resources for future security initiatives based on risk assessment.
• Determine and follow the security and infrastructure mid & long-term investment strategy.
• Develop business case justifications and cost/benefit analyses for technology spending and initiatives.
• Define requirements for new technology implementations.

IT Security and Operations Management

• Oversee the portfolio of security and infrastructure projects, including approval, prioritization, and control.
• Responsible for the disaster recovery plans, procedures, audits, and enhancements.
• Develop, implement, maintain, and oversee enforcement of policies, procedures, control mechanisms, and associated plans based on industry-standard best practices, in line with internal and external audits.
• Recommend and implement changes in security policies and practices in accordance with changes in local or federal law. Ensure that facilities, premises, and equipment adhere to all applicable laws and regulations.
• Collaborate with IT leaders, privacy officer, and HR to establish and maintain a system for ensuring that security and privacy policies are met.
• Assess and communicate any and all security risks associated with any purchases or practices performed by the company.
• Lead cloud strategy: Develop and implement strategies for cloud adoption, ensuring secure and scalable cloud infrastructure.
• Develop, track, and control the security and operations services annual operating and capital budgets for purchasing, staffing, and operations.
• Establish service-level agreements with business units. Ensure continuous delivery of technical services through oversight of these service level agreements by monitoring systems, programs, and equipment performance.
• Responsible for the infrastructure performance and provide statistics and reports.
• Direct and administrate a contingent of IT professionals, and where necessary, conduct performance reviews and corrective action. Supervise recruitment, development, retention, and organization of all technical staff in accordance with corporate budgetary objectives and personnel policies.

Global Team Leadership and Management

• Lead and manage a diverse, global team responsible for IT security and infrastructure across multiple regions.
• Foster a culture of collaboration, inclusivity, and innovation within the team, ensuring alignment with the organization’s strategic goals.
• Implement best practices in team management, including performance management, professional development, and succession planning.
• Ensure effective communication across geographically dispersed teams, leveraging technology and regular meetings to maintain alignment and cohesion.
• Develop and mentor team members, focusing on building leadership capabilities and technical expertise within the team.
• Oversee the coordination of global initiatives, ensuring that regional teams are equipped and aligned with the overall IT security and infrastructure strategy.

Vendor and Contract Management:

• Negotiate with vendors, outsourcers, and contractors to secure infrastructure-specific products and services.
• Lead and supervise bid proposals, contracts, scope of work reports, and other documentation for infrastructure projects and associated efforts.
• Review hardware and software acquisition and maintenance contracts and pursue master agreements to capitalize on economies of scale.

Education / Certification / Qualifications / Experience

• Bachelor’s degree in management information systems, computer science, engineering, business, or a related field, or equivalent work experience.
• 10 years of experience managing IT and/or security operations, with a strong focus on information security.
• Extensive experience in developing and implementing security strategies, policies, and procedures to protect organizational assets.
• In-depth knowledge of service delivery, including the successful implementation and management of service level agreements (SLAs).
• Strong understanding of technology environments, including information security, building security, and defense solutions.
• Excellent communication skills, both written and oral, with the ability to lead discussions, present ideas to audiences of all sizes, and interact effectively with all levels of the organization.
• Considerable knowledge of business theory, business processes, management, budgeting, and business office operations.

Personal Attributes / Skills and Abilities

• Proven leadership ability, with a track record of leading and developing high-performing teams.
• Superior understanding of the organization’s goals and objectives, with the ability to align IT and security strategies accordingly.
• Exceptional analytical skills and a problem-solving attitude, with a focus on finding innovative security solutions.
• Ability to work under pressure to meet deadlines and targets, both as an individual contributor and as part of a team.
• Customer-oriented and curious, with a strong focus on understanding and meeting customer needs.
• Solid organizational skills, including time management, prioritization, and project estimation.
• Skilled at coordinating the efforts of different teams on priorities and deliverables, avoiding fragmentation and siloed work.
• Willingness to travel to KDC subsidiaries worldwide as required.

KDC-ONE is an equal opportunity employer and does not discriminate on the basis of race, religion, color, national origin, age, sex, gender, disability or any other characteristic protected by law. I understand that employment with KDC-ONE Company is at-will, meaning that I or KDC-ONE Company may terminate my employment at any time, or for any reason consistent with applicable state or federal law. I understand that KDC-One requires the successful completion of a drug and/or alcohol test as a condition of employment.