Director, Security

About This Role

This director-level role leads the company's cybersecurity efforts, developing and implementing comprehensive security strategies to protect the DMS platform, data, assets, and personnel. It is critical for protecting dealer data and internal systems, ensuring Lightspeed remains a secure and trusted partner for dealers and OEMs across North America.

Responsibilities

• Develop and enforce security policies, protocols, and procedures to safeguard the DMS platform, dealer data, and broader corporate technology footprint
• Conduct regular risk assessments to identify potential security threats and vulnerabilities, and develop mitigation strategies to address these risks
• Design and implement Lightspeed's security incident process
• Lead the response to security incidents, including investigation, containment, and remediation, coordinating with law enforcement and other external entities as necessary
• Continuously monitor security systems and networks for potential threats, and maintain detailed security reports and documentation
• Ensure compliance with relevant security standards and regulations, including SOC 1 and SOC 2
• Conduct regular security audits and assessments
• Develop and run secure coding education programs to ensure the development team follows best practices
• Develop and deliver training programs to educate employees about security best practices and protocols
• Work closely with other departments to ensure security measures are integrated into all business aspects

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field
• Minimum of 5 years of experience in a security management role, preferably within a SaaS or technology environment
• Strong knowledge of security protocols, systems, and best practices
• Experience with SOC 1 and SOC 2 compliance
• Proficiency with security tools like Microsoft XDR, AdLumin, and DarkTrace
• Experience running penetration testing programs and static code analysis remediation drives
• Knowledge of dynamic application scanning tools and secure coding education programs
• Excellent leadership and team management skills
• Strong analytical and problem-solving abilities
• Excellent communication and interpersonal skills
• Ability to work under pressure and handle multiple tasks simultaneously
• Applicants must be authorized to work in the U.S.

Nice to have:

• Advanced certifications such as CISSP, CISM, or CEH
• Familiarity with data security considerations specific to dealer, franchise, or vertical SaaS platforms (e.g., Powersports, Marine, RV, Trailer, Outdoor Power Equipment)

About the Company

Lightspeed is a leading provider of cloud-based software for dealerships, serving the Powersport, Marine, RV, Trailer, and Golf Car industries. Its Dealer Management Solution (DMS) enables dealerships to optimize end-to-end business operations, including Sales, Parts, Service, Rentals, Payments, Accounting, and Customer Relationship Management (CRM). Lightspeed is the most complete and integrated DMS in the industry with over 500 integrations with Original Equipment Manufacturers (OEMs), aftermarket parts and accessory distributors, and dozens of other software tools. It empowers over 4,500 dealers across North America.