Director, Security

Position Summary

We are seeking a highly skilled and experienced Director, Secuirty to lead our cybersecurity efforts. You will be responsible for developing and implementing comprehensive security strategies to protect our DMS platform and ensure the safety of our data, assets, and personnel.

This role is critical to protecting the dealer data entrusted to Lightspeed's DMS platform, as well as our internal systems, ensuring Lightspeed remains a secure and trusted partner for dealers and OEMs across North America.

What You'll Do

Security Strategy & Policy

• Develop and enforce security policies, protocols, and procedures to safeguard our DMS platform, the dealer data it holds, and our broader corporate technology footprint.

• Conduct regular risk assessments to identify potential security threats and vulnerabilities, and develop mitigation strategies to address these risks.

Incident Response & Monitoring

• Design and implement Lightspeed's security incident process. Lead the response to security incidents, including investigation, containment, and remediation, coordinating with law enforcement and other external entities as necessary.

• Continuously monitor security systems and networks for potential threats, and maintain detailed security reports and documentation.

Compliance, Audits & Secure Development

• Ensure compliance with relevant security standards and regulations, including SOC 1 and SOC 2. Conduct regular security audits and assessments.

• Develop and run secure coding education programs to ensure the development team follows best practices.

Security Awareness & Cross-Functional Collaboration

• Develop and deliver training programs to educate employees about security best practices and protocols.

• Work closely with other departments to ensure security measures are integrated into all business aspects.

What You Should Have

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field. Advanced certifications such as CISSP, CISM, or CEH are preferred.

• Minimum of 5 years of experience in a security management role, preferably within a SaaS or technology environment.

• Strong knowledge of security protocols, systems, and best practices.

• Experience with SOC 1 and SOC 2 compliance.

• Proficiency with security tools like Microsoft XDR, AdLumin, and DarkTrace.

• Experience running penetration testing programs and static code analysis remediation drives.

• Knowledge of dynamic application scanning tools and secure coding education programs.

• Excellent leadership and team management skills.

• Strong analytical and problem-solving abilities.

• Excellent communication and interpersonal skills.

• Ability to work under pressure and handle multiple tasks simultaneously.

Preferred Qualifications

• Familiarity with data security considerations specific to dealer, franchise, or vertical SaaS platforms (e.g., Powersports, Marine, RV, Trailer, Outdoor Power Equipment).