Nice reply and correct - if there was no security personnel involved to build the retail store systems, etc.

Now, security is not just technology, a security person who can not get over the management problems is not really a professional. A security person takes it to whatever level or even outside to get things secured. I know, a big pain and you may even get fired telling the truth. This doesn't mean blindly executing security, business is a lot of risk management, so if the corporation is willing to take the risks, live with it (or leave) and document all and everything, saves a lot of grief later.

In my mind IT could/should be a huge part of a corporate security but IT also have to learn to navigate the business empire, otherwise these things just keep happening.