Director, Cloud Security

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce. Our brand promise - Makes Work Life Better TM- Reflects our commitment to employees, customers, partners and communities globally.


Location: Work is what you do, not where you go. For this role, we are open to remote work and can hire anywhere in the United States or Canada.
About the Opportunity
Dayforce is seeking a Director, Cloud Security to own the security posture of our cloud-based services and products. You’ll build trust with customers and prospects by safeguarding Dayforce Cloud against internal and external threats—and you’ll partner across the organization to drive key cloud security initiatives.
What we're looking for
• You have built and scaled a cloud security practice in a highly regulated environment.
• You translate compliance frameworks into technical guardrails and measurable KPIs.
• You are a strategic yet hands-on security leader capable of guiding teams, building consensus, and communicating at all levels.
• You are a data-driven thinker who turns analytics into actions.
• You are a charismatic, technically credible, and obsessed with making a significant impact
What you'll get to do
• Develop a security and compliance strategy that will meet the needs of Dayforce Cloud customers and prospects. Implement security controls that meet compliance obligations in a global cloud service. Help drive and oversee technical projects related to security and compliance in collaboration with cloud engineering partners.
• Develop a deep understanding of the cloud service, risk management, compliance, and enterprise technology environment to develop security architectures enabled by security technologies and services effectively.
• Build and develop a global cloud security and compliance organization to deliver best-in-class cloud services, and continue to improve current security and compliance capabilities across our global infrastructure.
• Coach, guide, and motivate the team of cloud security architects and engineers.
• Partner with teams across Dayforce to drive security objectives, work with cloud, development, engineering, product, operations, marketing, and sales. Lead and collaborate with cross-functional teams to identify strategic information security technology requirements.
• Prevent, detect, and respond to abusive activities targeting the Dayforce Cloud Platform by researching and developing detection techniques and solutions. Troubleshoot issues and product vulnerabilities to implement large-scale quality improvements.
• Develop metrics and provide regular reports on team performance and function.
• Oversee functional areas such as quality, metrics, and tool development. Work as part of a global management team regarding strategy, process improvement, people development, and technology implementation.
• Oversee the continuous monitoring and protection of information processing resources and serve as the focal point for enterprise security incident response planning and execution.
• Assess the viability and applicability of security technologies as they become available.
• Cloud Application Security Assessments.
• Public Cloud Security Design and Controls Architecture lead for Azure and AWS (IaaS, PaaS, and SaaS).
• Assess, maintain, and improve enterprise security policies, procedures, and standards to improve the overall effectiveness of internal security controls.
Skills & Experiences we value
• Bachelor’s or Master’s in Computer Science/Engineering, Information Security, or related discipline
• 10+ years with at least 5 years in leadership of a cloud security function
• 12+ years of industry experience in multiple security and compliance domains, including: Security engineering, risk management, compliance (SOC1/2/3, ISO27001, NIST, FedRAMP, SOX), threat and vulnerability management, identity and access management, security operations, forensics, and other security domains
• A proven track record of hiring, developing, and growing technical talent, strong executive presence, and demonstrate outstanding communication skills
• Demonstrable experience and knowledge in the following: Network security, public cloud infrastructure controls including next generation firewalls, proxies, advanced malware controls, CNAPP, CIEM, CSPM, KSPM, XDR, IDS/IPS, CASB, Cloud Proxy, DLP, MFA, cloud automation and management tools
• Well-versed with cloud security tools, public cloud providers, CI/CD platforms, and container services
• Demonstrable experience with architecting enterprise security solutions including cloud solutions with Azure, AWS,GCP, Azure, SaaS services
• Certifications a plus: CISSP, CISM, CISA, CASP, CEH, Security+, CCSP


What’s in it for you
Dayforce is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment.
We encourage individuals to apply based on their passions.
Dayforce encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through competitive pay and benefits.
With a commitment to community impact, including volunteer days and our charity, Dayforce Cares we provide opportunities for you to thrive both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself.
About the Salary Ranges

Please note that the salary range mentioned in this job description should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate’s experience, skills, budget and location. Our company is committed to providing a fair, equitable, and competitive package that reflects the value an individual brings to the organization.
Fraudulent Recruiting
Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com or @Ceridian.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Dayforce employee, please refer to our fraudulent recruiting statement found here: https://www.dayforce.com/be-aware-of-recruiting-fraud