Enterprise Controls and Assurance Senior Analyst

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region.
Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce.
Our brand promise - Makes Work Life Better™- Reflects our commitment to employees, customers, partners and communities globally.


About the Opportunity
Join the Enterprise Controls and Assurance team responsible for advising, supporting, and monitoring the business on the effective development, implementation, and continuous improvement of risk management and internal controls for the organization.
While Dayforce recently transitioned to private equity ownership, the Enterprise Controls and Assurance organization continues to provide subject matter expertise for specific regulatory and compliance frameworks, to help the business achieve its objectives as it prepares for future growth.
The Senior Associate, Enterprise Controls and Assurance is responsible for supporting the design, assessment, and continuous improvement of internal controls aligned with key regulatory and compliance frameworks, including SOX, SOC (1 / 2), ISO (e.g., 27001), NIST, and FedRAMP. This role partners with cross-functional teams to ensure controls are effectively designed, implemented, and operating to mitigate risk and meet regulatory requirements.

What you'll get to do
• Control Design & Implementation
◦ Design and document internal controls to support compliance with SOX, SOC 1 / 2, ISO 27001, NIST, and FedRAMP frameworks
◦ Maintain unified control framework library and control evidence request library
◦ Evaluate existing processes, assess risks, and identify control gaps, redundancies, and optimization opportunities
◦ Develop control narratives, process flows, and risk/control matrices (RCMs)
• Advisory & Risk Management
◦ Provide advisory support to business and technology teams on control requirements and best practices
◦ Translate regulatory and framework requirements into practical, scalable control solutions
◦ Conduct risk assessments and collaborate with control owners in defining risk mitigation strategies
• Compliance & Testing Support
◦ Support SOX compliance efforts including walkthroughs, testing coordination, issue identification, and remediation tracking
◦ Assist with SOC audits, ISO certification activities, and FedRAMP/NIST readiness initiatives
◦ Coordinate with internal/external auditors and provide guidance to control owners responsible for gathering required documentation and evidence
• Monitoring & Continuous Improvement
◦ Track control performance and remediation efforts to ensure timely resolution of issues
◦ Recommend enhancements to improve control efficiency and effectiveness
◦ Stay current on evolving regulatory requirements and industry trends
• Stakeholder Collaboration
◦ Partner with IT, Security, Finance, and Operations teams to align control activities
◦ Communicate control requirements, risks, and findings clearly to stakeholders
◦ Support training and awareness efforts related to compliance and controls

Skills and experience we value
• Bachelor’s degree in Accounting, Information Systems, Finance, Cybersecurity, or related field
• 3–5+ years of experience in internal audit, risk advisory, compliance, or controls-related roles, with focus on IT
• Strong knowledge and experience with one or more frameworks: SOX, SOC 1 / 2, ISO 27001, NIST, FedRAMP
• Strong understanding of and experience with general IT controls (GITCs) and business process controls
• Proven experience working with auditors and regulatory bodies
• Strong analytical, critical-thinking and problem-solving skills
• Ability to identify and assess risk
• Ability to translate complex compliance requirements into actionable, effective controls
• Excellent written and verbal communication skills
• Attention to detail and strong organizational abilities
• Ability to manage multiple priorities in a fast-paced environment
What would make you really stand out
• Professional certifications such as CPA, CISA, CIA, CRISC, or ISO 27001 Lead Implementer/Auditor
• Experience in public accounting or consulting (Big 4 or similar)
• Familiarity with GRC tools (e.g., Workiva, ServiceNow GRC, AuditBoard)
• Knowledge of cloud environments (AWS, Azure, etc.) and related compliance requirements


What’s in it for you