Director, Cloud Security

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce. Our brand promise - Makes Work Life Better TM- Reflects our commitment to employees, customers, partners and communities globally.


Location: Work is what you do, not where you go. For this role, we are open to remote work and can hire anywhere in the United States or Canada.
About the Opportunity
Dayforce is seeking a Director, Cloud Security to own the security posture of our cloud-based services and products. You’ll build trust with customers and prospects by safeguarding Dayforce Cloud against internal and external threats—and you’ll partner across the organization to drive key cloud security initiatives.
What we're looking for
• You have built and scaled a cloud security practice in a highly regulated environment.
• You translate compliance frameworks into technical guardrails and measurable KPIs.
• You are a strategic yet hands-on security leader capable of guiding teams, building consensus, and communicating at all levels.
• You are a data-driven thinker who turns analytics into actions.
• You are a charismatic, technically credible, and obsessed with making a significant impact
What you'll get to do
• Develop a security and compliance strategy that will meet the needs of Dayforce Cloud customers and prospects. Implement security controls that meet compliance obligations in a global cloud service. Help drive and oversee technical projects related to security and compliance in collaboration with cloud engineering partners.
• Develop a deep understanding of the cloud service, risk management, compliance, and enterprise technology environment to develop security architectures enabled by security technologies and services effectively.
• Build and develop a global cloud security and compliance organization to deliver best-in-class cloud services, and continue to improve current security and compliance capabilities across our global infrastructure.
• Coach, guide, and motivate the team of cloud security architects and engineers.
• Partner with teams across Dayforce to drive security objectives, work with cloud, development, engineering, product, operations, marketing, and sales. Lead and collaborate with cross-functional teams to identify strategic information security technology requirements.
• Prevent, detect, and respond to abusive activities targeting the Dayforce Cloud Platform by researching and developing detection techniques and solutions. Troubleshoot issues and product vulnerabilities to implement large-scale quality improvements.
• Develop metrics and provide regular reports on team performance and function.
• Oversee functional areas such as quality, metrics, and tool development. Work as part of a global management team regarding strategy, process improvement, people development, and technology implementation.
• Oversee the continuous monitoring and protection of information processing resources and serve as the focal point for enterprise security incident response planning and execution.
• Assess the viability and applicability of security technologies as they become available.
• Cloud Application Security Assessments.
• Public Cloud Security Design and Controls Architecture lead for Azure and AWS (IaaS, PaaS, and SaaS).
• Assess, maintain, and improve enterprise security policies, procedures, and standards to improve the overall effectiveness of internal security controls.
Skills & Experiences we value
• Bachelor’s or Master’s in Computer Science/Engineering, Information Security, or related discipline
• 10+ years with at least 5 years in leadership of a cloud security function
• 12+ years of industry experience in multiple security and compliance domains, including: Security engineering, risk management, compliance (SOC1/2/3, ISO27001, NIST, FedRAMP, SOX), threat and vulnerability management, identity and access management, security operations, forensics, and other security domains
• A proven track record of hiring, developing, and growing technical talent, strong executive presence, and demonstrate outstanding communication skills
• Demonstrable experience and knowledge in the following: Network security, public cloud infrastructure controls including next generation firewalls, proxies, advanced malware controls, CNAPP, CIEM, CSPM, KSPM, XDR, IDS/IPS, CASB, Cloud Proxy, DLP, MFA, cloud automation and management tools
• Well-versed with cloud security tools, public cloud provide