IT Risk

kdc/one Corporate Longueuil, 375 boul Roland-Therrien, Longueuil, Quebec, Canada Req #4086

Thursday, September 5, 2024

KDC is a network of best-in-class custom formulators and manufacturers of color cosmetics, skincare, haircare, bath & body, fragrance, deodorant, home, health, industrial, and auto care products. KDC delivers high-touch innovation, operational excellence, and speed to market to well-known and emergingbeauty, personal, and specialty companies from coast to coast. KDC has its head office in Longueuil, Québec. In addition, KDC has 10 operating facilities located throughout North America. p>

Position Summary :

The VP IT Security and Operations is a key leadership role responsible for setting the vision and direction for IT security and operations across the organization. This role involves the development and implementation of strategic plans to ensure the organization's security and operational excellence. The VP will lead a team responsible for safeguarding the company's information assets, ensuring infrastructure performance, and maintaining the continuity of critical operations. This position requires a strategic thinker with deep technical knowledge and strong leadership skills to drive initiatives that align with the company's goals.

Key Responsibilities/ Accountabilities

Strategic Leadership and Planning

• Define and drive the IT security and operations strategy in alignment with organizational goals.
• Act as advocate and primary liaison for the company’s security vision via regular written and in-person communications with key stakeholders, kdc/one executives, department heads, and end users regarding pertinent security and infrastructure activities.
• Define and communicate corporate plans, procedures, policies, and standards for the organization for acquiring, implementing, and operating new security and operating systems, equipment, software, and other technologies.
• Lead strategic security and operational planning to achieve business goals by prioritizing initiatives and coordinating the evaluation, deployment, and management of current and future technologies.
• Plan and ensure proper resources for future security initiatives based on risk assessment.
• Develop business case justifications and cost/benefit analyses for technology spending and initiatives.
• Define requirements for new technology implementations.

IT Security and Operations Management

• Oversee the portfolio of security and infrastructure projects, including approval, prioritization, and control.
• Develop, implement, maintain, and oversee enforcement of policies, procedures, control mechanisms, and associated plans based on industry-standard best practices, in line with internal and external audits.
• Recommend and implement changes in security policies and practices in accordance with changes in local or federal law. Ensure that facilities, premises, and equipment adhere to all applicable laws and regulations.
• Collaborate with IT leaders, privacy officer, and HR to establish and maintain a system for ensuring that security and privacy policies are met.
• Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Develop, track, and control the security and operations services annual operating and capital budgets for purchasing, staffing, and operations.
• Establish service-level agreements with business units. Ensure continuous delivery of technical services through oversight of these service level agreements by monitoring systems, programs, and equipment performance.
• Responsible for the infrastructure performance and provide statistics and reports.
• Direct and administrate a contingent of IT professionals, and where necessary, conduct performance reviews and corrective action. Supervise recruitment, development, retention, and organization of all technical staff in accordance with corporate budgetary objectives and personnel policies.

Global Team Leadership and Management

• Lead and manage a diverse, global team responsible for IT security and infrastructure across multiple regions.
• Implement best practices in team management, including performance management, professional development, and succession planning.
• Develop and mentor team members, focusing on building leadership capabilities and technical expertise within the team.
• Oversee the coordination of global initiatives, ensuring that regional teams are equipped and aligned with the overall IT security and infrastructure strategy.

Vendor and Contract Management:

• Negotiate with vendors, outsourcers, and contractors to secure infrastructure-specific products and services.
• Lead and supervise bid proposals, contracts, scope of work reports, and other documentation for infrastructure projects and associated efforts.
• Review hardware and software acquisition and maintenance contracts and pursue master agreements to capitalize on economies of scale.

Education / Certification / Qualifications / Experience

• Bachelor’s degree in management information systems, computer science, engineering, business, or a related field, or equivalent work experience.
• 10 years of experience managing IT and/or security operations, with a strong focus on information security.
• Extensive experience in developing and implementing security strategies, policies, and procedures to protect organizational assets.
• In-depth knowledge of service delivery, including the successful implementation and management of service level agreements (SLAs).
• Strong understanding of technology environments, including information security, building security, and defense solutions.
• Considerable knowledge of business theory, business processes, management, budgeting, and business office operations.
• Superior understanding of the organization’s goals and objectives, with the ability to align IT and security strategies accordingly.
• Solid organizational skills, including time management, prioritization, and project estimation.
• Willingness to travel to kdc/one subsidiaries worldwide as required.

KDC-ONE is an equal opportunity employer and does not discriminate on the basis of race, religion, color, national origin, age, sex, gender, disability or any othercharacteristic protected by law. I understand that employment with KDC-ONE Company is at-will, meaning that I or KDC-ONE Company may terminate my employment at any time, or for any reason consistent with applicable state or federal law. I understand that KDC-One requires the successful completion of a drug and/or alcohol test as a condition of employment.