Senior Security Analyst at Lightspeed Commerce

Lightspeed is seeking a Senior Security Analyst to enhance its security risk management program. The role involves reporting on the program, providing insights, and aiding security leadership in understanding and mitigating security risks. The successful candidate will work within a dynamic and innovative organization committed to maintaining high standards of security, governance, and risk management.

Responsibilities:

• Maintain the security risk register.
• Review security risk assessments.
• Monitor action plans for risk remediation.
• Provide training on documenting and enforcing security improvements.
• Evaluate and recommend risk models.
• Report on security risk metrics.
• Review post-incident learnings.
• Stay abreast of security changes and best practices.
• Interact with business units to understand their plans and risk posture.
• Coordinate risk mitigation strategies.
• Align security awareness initiatives with risk reduction objectives.
• Create security awareness content.
• Assist with PCI DSS and SOC2 compliance.

Requirements:

• 3+ years of security risk management experience.
• Accountability and continuous improvement.
• Track record of identifying and reporting on KPIs.
• Excellent communication skills.
• Ability to summarise progress and identify challenges.
• Experience with security frameworks (NIST CSF, PCI, ISO/IEC 27001, GDPR).

Lightspeed offers:

• Equity for all employees.
• Continuous development opportunities.
• Flexible work culture.
• Health insurance.
• Contributions to pension plan (RRSP).
• Health and wellness benefit.
• Paid leave for new parents.
• Mental health support.
• Training opportunities.
• Fully stocked kitchen.
• Happy hours.