{"id":1116180,"url":"https://alion.io/job/lightspeed-commerce-director-pt-operations-incident-management-risk","title":"Director, P&T Operations - Incident Management & Risk","company":{"id":5549,"name":"Lightspeed Commerce","domain":"lightspeedhq.com","url":"https://alion.io/company/lightspeedhq","size_band":"1001-5000","is_staffing_agency":false,"is_intermediary":false,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":80,"open_postings":15,"ghost_share":0,"stale_share":0.8,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-09-23T05:45:00Z"}},"role":"Finance","role_family":"Finance","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":225000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-22T14:35:49Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-09-23T18:40:12Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Hi there! Thanks for stopping by\nAre you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!\nWe're looking for a Director, P&T Operations - Incident Management & Risk to join our Product & Technology Operations team.\nIn this role, you'll build and lead the operating mechanisms that help Product & Technology respond effectively to incidents, reduce enterprise risk, and give leaders clear visibility into where attention and action are needed. You'll bring together fragmented processes and practices, establish common standards, improve communications and follow-through, and ensure the right data reaches engineering teams, executives, and security leaders.\nYou'll work at the intersection of Product & Technology Operations, Engineering, Security, and executive leadership. The scope spans operational and security incidents, vulnerability management, and the mechanisms used to identify, assess, track, and reduce technology risk. You'll also help connect broader enterprise risk areas - including responsible AI, application and infrastructure security, identity and access, data protection, digital supply-chain risk, shadow IT/AI, security compliance, and operational resilience - into a coherent leadership view without becoming the functional owner for each domain.\nThis is not a traditional PMO role. We're looking for someone who can design and improve how the organization operates, bring structure to complex cross-functional problems, drive action and accountability, and enable the CTO and Security leadership team to operate effectively at executive and board-committee level.\nWhat you'll be doing\nUnify and evolve incident management\nEstablish a consistent P&T-wide incident management framework, including clear standards, roles, severity definitions, escalation paths, communications, and expectations for follow-through.\n\nBring together existing incident practices across teams, preserving what works while creating greater consistency, clarity, and organizational visibility.\n\nStrengthen post-incident practices so actions are owned, tracked to completion, and translated into systemic improvements rather than isolated fixes.\n\nPartner with Engineering and Security leaders to continuously improve incident readiness, response effectiveness, and operational resilience.\n\nStrengthen security incident and vulnerability operations\nPartner with Security and Engineering to strengthen the operating mechanisms for security incidents and vulnerability management, including intake, prioritization, ownership, remediation tracking, escalation, and reporting.\n\nCreate clear visibility into material vulnerabilities, remediation progress, aging, exceptions, and areas requiring leadership intervention.\n\nEnsure security incidents and vulnerabilities connect into broader P&T incident, risk, and executive reporting mechanisms while maintaining clear functional ownership within Security and Engineering.\n\nHelp identify recurring breakdowns in process, ownership, or controls and drive cross-functional improvements.\n\nCreate an integrated view of technology risk\nBuild the mechanisms that give P&T and Security leadership a clear, actionable view of material technology and operational risks, trends, mitigations, and decisions required.\n\nPartner with domain owners across responsible AI and AI governance, application and infrastructure security, digital supply-chain risk, identity and access management, Zero Trust, data protection, shadow IT/AI, security compliance, and operational resilience.\n\nTranslate complex risk information into clear priorities, tradeoffs, and actions without duplicating the accountability of the teams that own each risk domain.\n\nIdentify patterns across incidents, vulnerabilities, and risk signals and use them to inform priorities and systemic improvement.\n\nImprove reporting, communications, and executive readiness\nDefine the metrics and reporting needed to understand incident health, vulnerability exposure, remediation progress, risk trends, and operational resilience.\n\nDevelop clear executive-level views that surface what matters, where risk is changing, what actions are underway, and where decisions or intervention are required.\n\nImprove incident and risk communications across technical teams, business stakeholders, executives, and other partners so information is timely, accurate, and appropriate for the audience.\n\nEnable the CTO and Security leadership team with the operating cadence, insights, and materials needed for executive and board-committee discussions.\n\nDrive cross-functional action and continuous improvement\nLead complex work across Engineering, Security, Product, Legal, Compliance, and other partners through influence rather than formal authority.\n\nCreate clear ownership and accountability for cross-functional actions, ensuring critical issues do not stall between teams.\n\nEstablish operating cadences that keep material incidents, vulnerabilities, and risks moving toward resolution without creating unnecessary process.\n\nContinuously assess where processes, tooling, data, or organizational interfaces need to improve and drive those changes through implementation.\n\nLead the function\nSet the vision and operating model for incident management and technology risk operations within P&T Operations.\n\nBuild strong partnerships with Engineering and Security leadership and act as a trusted advisor on operational readiness, risk visibility, and organizational response.\n\nDevelop the capabilities, processes, and team needed as the scope matures, while remaining willing to operate hands-on where the organization needs it most.\n\nWhat you need to bring\nSignificant experience leading incident management, technology operations, security operations, risk programs, or a closely related function in a complex technology organization.\n\nDemonstrated experience designing or materially improving incident management processes, standards, communications, reporting, and post-incident follow-through across multiple teams.\n\nWorking knowledge of security incident response and vulnerability management, with the ability to partner credibly with Security and Engineering leaders without needing to be the deepest technical expert in every domain.\n\nExperience building executive-level risk, incident, or operational reporting that turns complex technical information into clear insights, actions, and decisions.\n\nStrong understanding of how technology and security risks are identified, prioritized, mitigated, tracked, and communicated in an enterprise environment.\n\nExperience leading cross-functional change and driving accountability across teams where you do not have direct authority.\n\nStrong executive communication skills, including the judgment to tailor communications for technical teams, senior executives, and board-level audiences.\n\nAbility to bring structure to ambiguity, identify systemic issues, and build durable operating mechanisms rather than simply coordinate activity.\n\nStrong judgment, calm under pressure, and the ability to operate effectively during high-severity or high-visibility incidents.\n\nA collaborative leadership style and the ability to build trust across Product, Engineering, Security, Legal, Compliance, and executive leadership.\n\nFuel your growth. Find your people.\nAt Lightspeed, your growth is our priority. We invest in you with continuous learning opportunities, global mobility and benefits designed to support you-all within a driven, diverse and inclusive team that’s passionate about empowering our communities.\nPlease note that we ask applicants to disclose any criminal convictions, and we conduct criminal record checks as part of our hiring process for this role.\nTo all recruitment agencies: Lightspeed does not accept unsolicited agency resumes. If we have not directly engaged your company in writing to supply candidates for a specific vacancy, Lightspeed will not be responsible for any fees related to unsolicited resumes.\nLightspeed is a proud equal opportunity employer and we are committed to creating an inclusive and barrier-free workplace. Lightspeed welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.\nWhere to from here?\nObviously, this has to be mutually beneficial: we want you to step into a role you love, and we want to offer you a place you’re proud to come to every day. For a glimpse into our world check out our career page here.\nLightspeed is building communities through commerce, and we need people from all backgrounds and lived experiences to do that. We were founded in 2005, in Montreal’s gay village and our original members were all part of the LGBTQ+ community. The ethos of our business has been about inclusion from the very beginning, and we strive to provide a workplace where everyone belongs.\nWho we are:\nPowering the businesses that are the backbone of the global economy, Lightspeed's one-stop commerce platform helps merchants innovate to simplify, scale, and provide exceptional customer experiences. Our cloud commerce solution transforms and unifies online and physical operations, multichannel sales, expansion to new locations, global payments, financial solutions, and connection to supplier networks.\nFounded in Montréal, Canada in 2005, Lightspeed is dual-listed on the New York Stock Exchange (NYSE: LSPD) and Toronto Stock Exchange (TSX: LSPD). With teams across North America, Europe, and Asia Pacific, the company serves retail, hospitality, and golf businesses in over 100 countries.\nLightspeed handles your information in accordance with our Applicant Privacy Statement.","description_format":"text","description_chars":9736,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Commerce","Payments"],"lifecycle":[{"event":"open","at":"2026-09-22T15:52:37Z"}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-09-23T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/lightspeed-commerce-director-pt-operations-incident-management-risk","json_url":"https://alion.io/job/lightspeed-commerce-director-pt-operations-incident-management-risk.json","meta":{"generated_at":"2026-09-23T20:59:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers"}}