Director, Security

Company Overview:

Lightspeed is the leading provider of cloud-based software for dealerships, serving the Powersport, Marine, RV, Trailer, and Golf Car industries adding hundreds of dealerships to the Lightspeed community each year.

Lightspeed’s Dealer Management Solution (DMS) enables dealerships to optimize their end-to-end business operations, including Sales, Parts, Service, Rentals, Payments, Accounting, and Customer Relationship Management (CRM). When implemented into their daily operations, Lightspeed helps dealers increase their profitability by selling more units, service, and parts, all while creating a more streamlined experience for customers.

Lightspeed is the most complete and integrated DMS in the industry with over 500 integrations with Original Equipment Manufacturers (OEMs), aftermarket parts and accessory distributors and dozens of other software tools that a dealership may use to run their business. Uniquely designed by dealers for dealers, and refined over the past 4 decades, Lightspeed empowers over 4,500+ dealers across North America with the tools and technology they need to manage their dealerships.

We are seeking a highly skilled and experienced Director, Secuirty to lead our cybersecurity efforts. You will be responsible for developing and implementing comprehensive security strategies to protect our DMS platform and ensure the safety of our data, assets, and personnel.

This role is critical to protecting the dealer data entrusted to Lightspeed’s DMS platform, as well as our internal systems, ensuring Lightspeed remains a secure and trusted partner for dealers and OEMs across North America.

Security Strategy & Policy

• Develop and enforce security policies, protocols, and procedures to safeguard our DMS platform, the dealer data it holds, and our broader corporate technology footprint.

• Conduct regular risk assessments to identify potential security threats and vulnerabilities, and develop mitigation strategies to address these risks.

Incident Response & Monitoring

• Design and implement Lightspeed’s security incident process. Lead the response to security incidents, including investigation, containment, and remediation, coordinating with law enforcement and other external entities as necessary.

• Continuously monitor security systems and networks for potential threats, and maintain detailed security reports and documentation.

Compliance, Audits & Secure Development

• Ensure compliance with relevant security standards and regulations, including SOC 1 and SOC 2. Conduct regular security audits and assessments.

• Develop and run secure coding education programs to ensure the development team follows best practices.

Security Awareness & Cross-Functional Collaboration

• Develop and deliver training programs to educate employees about security best practices and protocols.

• Work closely with other departments to ensure security measures are integrated into all business aspects.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field. Advanced certifications such as CISSP, CISM, or CEH are preferred.

• Minimum of 5 years of experience in a security management role, preferably within a SaaS or technology environment.

• Strong knowledge of security protocols, systems, and best practices.

• Experience with SOC 1 and SOC 2 compliance.

• Proficiency with security tools like Microsoft XDR, AdLumin, and Dark Trace.

• Experience running penetration testing programs and static code analysis remediation drives.

• Knowledge of dynamic application scanning tools and secure coding education programs.

• Excellent leadership and team management skills.

• Strong analytical and problem-solving abilities.

• Excellent communication and…