VP, Deputy Chief Information Security Officer

We’re looking for bold, entrepreneurial talent ready to help build something extraordinary — and reshape the future of building products distribution.

QXO is a publicly traded company founded by Brad Jacobs with the goal of building the market-leading company in the building products distribution industry. On April 30, 2025, QXO completed its first acquisition: Beacon Building Products, a leading distributor in the sector.

We are building a customer-focused, tech-enabled, and innovation-driven business that will scale rapidly through accretive M&A, organic growth, and greenfield expansion. Our strategy is rooted in delivering exceptional customer experiences, improving operational efficiency, and leveraging data, digital tools, and AI to modernize a historically under-digitized industry.

As a Deputy CISO at QXO , you’ll be a part of the Cybersecurity Leadership Team reporting to the CISO, the deputy chief information security officer (CISO) is responsible for day-to-day operations to support and augment the CISO’s overall responsibilities. The deputy CISO is an advanced role supporting the entire cybersecurity program. This individual provides leadership, executive support, strategic and tactical guidance, and complete execution for an enterprise-class cybersecurity program . Preferably, the deputy CISO will have a technical background with the ability to comprehend technologies, their purpose, and their security requirements, wherever they and their data reside . The deputy CISO’s technical background should encompass understanding threats, risk mitigation and technical controls.

What you'll do:

What you’ll do:

• Serve as the CISO representative when the CISO is not available, including making decisions usually made by the CISO.
• Enforce a strong security culture set forth by the CISO, ensuring uniformity across security leadership, divisions and employees.
• Act as a trusted point of contact for the chief information officer (CIO), chief technical officer (CTO), chief legal officer (CLO), security management and divisions.
• In conjunction with security leadership, define key performance indicators (KPIs) and metrics aligning with business initiatives and deliver to non-technical teams in terms that are readily comprehensible.
• Work closely with security leadership overseeing security operations, incident response, architecture, engineering, training & awareness, application security, and infrastructure.
• Advise on enterprise-wide people, process and technology security recommendations.
• Remove complexity and obstacles that hinder efficient security controls enterprise wide.
• Responsible for the cybersecurity architecture and engineering team, training and awareness team, and cybersecurity tool stack.
• Primary support for all cybersecurity M&A enforcement with approach and standards.
• Ensure security projects are delivered on time and within budget.
• Sponsor vendor and technology solution selection, as well as third-party consulting services as needed.
• Require and support independent verification and validation testing of the company security controls, networks, and data protection through internal team resources and independent consulting engagements.
• Provide motivation to security teams and employees to maximize rigorous system security controls.
• Offer mentoring to security leadership as needed to support people-first leadership principles.
• Foster strong relationships with internal business units and external entities to maintain a strong network.
• Build relationships with technical and compliance teams to deliver security-by-design controls that are incorporated into projects, architecture, infrastructure and applications.
• Openly support the management team and executive leadership, even during tumultuous times.
• Perform other duties as assigned.

What you'll bring:

What you’ll bring:

Skills and Experience

• At least 10+ years’ cybersecurity management experience with at least 8+ years in an operationally focused security practitioner role.
• Ability to effectively manage stress in a constantly changing environment.
• Driven to build a strong, cohesive team and positive enterprise-wide security culture.
• Strategic vision and ability to influence others.
• Ability to gain and preserve credibility with the team through sustained industry knowledge.
• Ability to motivate the team to achieve excellence, while giving credit and recognition where it is due.
• Demonstrated understanding and comprehension of a wide range of cybersecurity solutions.

Additional Qualifications

• Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.
• Self-starter requiring minimal supervision.
• Excellence in communicating privacy, business risk and remediation requirements from assessments.
• Analytical and problem-solving mindset.
• Highly organized and efficient.
• Demonstrated strategic and tactical thinking, along with decision-making skills and business acumen.

Education Requirements

• Master’s or other advanced degree (MBA, information assurance, computer science, etc.) preferred but not required.
• Bachelor's degree in business administration, information assurance or related technical field.
• Certification Requirements

Preferable, but not required:

• CISSP, CISM, CRISC, CISA

What you'll earn:

• 401(k) with employer match
• Medical, dental, and vision insurance
• PTO, company holidays, and parental leave
• Paid training and certifications
• Legal assistance and identity protection
• Pet insurance
• Employee assistance program (EAP)

About the company

QXO is the largest publicly traded distributor of roofing, waterproofing, and complementary building products in the United States. The company aims to become the tech-enabled leader in the $800 billion building products distribution industry and generate outsized value for shareholders. QXO is targeting $50 billion in annual revenues within the next decade through accretive acquisitions and organic growth.

QXO is an Equal Opportunity Employer. We value diversity and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other protected status.

Salary Range:

USD $240,000.00 - USD $375,000.00 /Yr.