Director, Security
About The Position
Lightspeed is seeking an experienced Director, Security to lead cybersecurity efforts and develop and implement comprehensive security strategies. The role protects the company’s Dealer Management Solution (DMS) platform, dealer data, internal systems, assets, and personnel, helping Lightspeed remain a secure and trusted partner for dealers and OEMs across North America. The Director will establish security policies and procedures, assess and mitigate risks, design and lead incident response, monitor security systems and networks, and maintain security documentation. The role also oversees compliance with relevant standards, including SOC 1 and SOC 2; conducts audits and assessments; and develops secure-coding education for the development team. The Director will deliver employee security-awareness training and collaborate across departments to integrate security into business operations.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- At least 5 years of experience in a security management role, preferably in a SaaS or technology environment.
- Strong knowledge of security protocols, systems, and best practices.
- Experience with SOC 1 and SOC 2 compliance.
- Proficiency with Microsoft XDR, AdLumin, and DarkTrace security tools.
- Experience running penetration-testing programs and static-code-analysis remediation initiatives.
- Knowledge of dynamic application scanning tools and secure-coding education programs.
- Excellent leadership and team-management skills.
- Strong analytical and problem-solving abilities.
- Excellent communication and interpersonal skills.
- Ability to work under pressure and handle multiple tasks simultaneously.
- Must be authorized to work in the U.S.
Nice To Haves
- Advanced certifications such as CISSP, CISM, or CEH.
- Familiarity with data-security considerations for dealer, franchise, or vertical SaaS platforms, such as Powersports, Marine, RV, Trailer, or Outdoor Power Equipment.
Responsibilities
- Develop and enforce security policies, protocols, and procedures for the DMS platform, dealer data, and corporate technology environment.
- Conduct regular risk assessments, identify threats and vulnerabilities, and develop mitigation strategies.
- Design and implement Lightspeed’s security incident process.
- Lead security incident investigation, containment, and remediation, coordinating with law enforcement and external entities as needed.
- Continuously monitor security systems and networks for potential threats.
- Maintain detailed security reports and documentation.
- Ensure compliance with relevant security standards and regulations, including SOC 1 and SOC 2.
- Conduct regular security audits and assessments.
- Develop and run secure-coding education programs for the development team.
- Develop and deliver employee training on security best practices and protocols.
- Collaborate with other departments to integrate security measures into business operations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
