Director, Security

Lightspeed•South Jordan, UT

23d•Remote

About The Position

Lightspeed is seeking a highly skilled and experienced Director, Security to lead cybersecurity efforts. The role is responsible for developing and implementing security strategies that protect the company’s Dealer Management Solution (DMS) platform, dealer data, internal systems, assets, and personnel. This position supports Lightspeed’s role as a secure and trusted partner to dealerships and OEMs across North America. The Director will establish security policies and procedures, assess and mitigate risks, design and lead incident response, monitor security systems, and maintain documentation. The role also oversees compliance with SOC 1 and SOC 2, conducts security audits, and promotes secure software development through coding education and remediation programs. The Director will provide security awareness training and collaborate across departments to integrate security into business operations.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
At least 5 years of experience in a security management role, preferably in a SaaS or technology environment.
Strong knowledge of security protocols, systems, and best practices.
Experience with SOC 1 and SOC 2 compliance.
Proficiency with Microsoft XDR, AdLumin, and DarkTrace security tools.
Experience running penetration testing programs and static code analysis remediation drives.
Knowledge of dynamic application scanning tools and secure coding education programs.
Strong leadership and team management skills.
Strong analytical and problem-solving abilities.
Excellent communication and interpersonal skills.
Ability to work under pressure and handle multiple tasks simultaneously.
Applicants must be authorized to work in the U.S.

Nice To Haves

Advanced certifications such as CISSP, CISM, or CEH are preferred.
Familiarity with data security considerations for dealer, franchise, or vertical SaaS platforms, such as Powersports, Marine, RV, Trailer, or Outdoor Power Equipment.

Responsibilities

Develop and enforce security policies, protocols, and procedures for the DMS platform, dealer data, and corporate technology.
Conduct regular risk assessments, identify threats and vulnerabilities, and develop mitigation strategies.
Design and implement Lightspeed’s security incident process.
Lead security incident investigation, containment, and remediation, coordinating with law enforcement and other external entities as needed.
Continuously monitor security systems and networks for potential threats.
Maintain detailed security reports and documentation.
Ensure compliance with relevant security standards and regulations, including SOC 1 and SOC 2.
Conduct regular security audits and assessments.
Develop and run secure coding education programs for the development team.
Develop and deliver employee training on security best practices and protocols.
Collaborate with other departments to integrate security measures into business operations.