Vice President, IT Infrastructure and Security

Global Industrial

Global Industrial Company (NYSE: GIC) is a leading distributor of high-quality, industrial-strength equipment and supplies, serving organizations of all sizes across a wide range of industries. With more than 75 years of experience, customers rely on us for our broad portfolio of national and private brands, trusted service, and strong value proposition.

We help customers keep their operations running by delivering the right products when they need them—because We Can Supply That™.

Key Responsibilities

IT Infrastructure Leadership

• Lead enterprise infrastructure functions including networks, cloud and hosting environments, servers, telecommunications, endpoint platforms, identity services, collaboration tools, and end-user support.
• Develop and execute a multi-year infrastructure roadmap that improves reliability, scalability, performance, security, automation, and cost efficiency.
• Oversee infrastructure operations, monitoring, service management, lifecycle planning, capacity management, patching, and vendor performance.
• Drive simplification and standardization across technology platforms, tools, licensing, support processes, and end-user experiences.
• Ensure infrastructure solutions support business growth, acquisitions, shared services, and modernization initiatives.

Information Security Management

• Develop, implement, and continuously improve enterprise security policies, standards, and procedures.
• Conduct risk assessments to identify vulnerabilities across infrastructure, applications, cloud services, identity platforms, and third-party services.
• Partner with infrastructure, application, and business teams to remediate risks and strengthen preventive controls.
• Oversee security architecture, vulnerability management, privileged access, endpoint protection, logging, monitoring, and incident response readiness.

Cybersecurity Strategy

• Create and execute a comprehensive cybersecurity strategy aligned with business goals and enterprise technology priorities.
• Oversee incident response planning, tabletop exercises, escalation procedures, and post-incident remediation.
• Collaborate with executives to manage technology, cybersecurity, operational, and compliance risks.
• Evaluate emerging threats, technology trends, and security capabilities to continuously improve the company’s risk posture.

Compliance Oversight

• Ensure adherence to applicable legal, regulatory, audit, contractual, and industry requirements.
• Collaborate with IT, Legal, Finance, Internal Audit, and business teams to embed efficient and sustainable security and compliance controls.
• Maintain and continuously improve SOX and PCI-DSS compliance programs.
• Drive control simplification, automation, evidence collection discipline, and remediation tracking across IT operations.
• Support business continuity and disaster recovery planning, testing, and operational resilience efforts.

Operational Excellence and Service Delivery

• Establish clear service levels, operating rhythms, escalation paths, and performance metrics for infrastructure and security operations.
• Lead vendor, managed service provider, and technology partner relationships to improve delivery quality and cost effectiveness.
• Partner with application and business teams to ensure projects are designed with secure, scalable, supportable, and compliant infrastructure foundations.
• Manage budgets, resource plans, prioritization, and execution across infrastructure, security, and compliance initiatives.

Staff Training and Awareness

• Educate employees on cybersecurity best practices.
• Conduct regular training sessions to enhance awareness of potential threats.

Competencies and skills

• Proven experience leading IT infrastructure, cybersecurity, compliance, or technology operations in a medium to large enterprise environment.
• Strong knowledge of enterprise infrastructure, including networks, cloud services, hosting, servers, endpoints, identity and access management, telecommunications, collaboration platforms, and service desk operations.
• Experience developing infrastructure roadmaps, modernizing platforms, improving operational reliability, and driving technology simplification and cost efficiency.
• Experience with IT risk management, threat modeling, vulnerability management, incident response, disaster recovery, and business continuity planning.
• Proficiency in information security domains, including policies and procedures, risk management, compliance, identity, monitoring, endpoint protection, and incident response.
• Familiarity with security and control frameworks such as ISO 27001, NIST, CIS, COBIT, SOX, and PCI-DSS.
• Ability to lead, manage, and develop distributed infrastructure, security, compliance, and support teams.
• Experience managing technology vendors, managed service providers, budgets, service levels, and operational performance metrics.
• Ability to adapt to changing priorities, technologies, business needs, and audit requirements.
• BSc/MSc degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Certifications such as CISSP, CISM, CISA, CRISC, CCSP, ITIL, or cloud/infrastructure certifications preferred.
• Experience with modern systems development methodologies, IT service management practices, automation, and operational tooling.
• Ability to work effectively as a partner to business leaders, executives, auditors, and external service providers.
• Detail-oriented, self-directed, and able to communicate complex technical and risk topics clearly to executive and business audiences.
• Strong leadership, team motivation, prioritization, and change management skills.
• Ability to work independently in a high-stress, multiple-priority environment.
• Excellent verbal and written communication skills in English.

EEO/AA Statement