Cybersecurity Program Manager
Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region.
Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce.
Our brand promise - Makes Work Life Better™ - Reflects our commitment to employees, customers, partners and communities globally.
About the opportunity
The Cybersecurity Program Manager is responsible for overseeing the third-party risk management (TPRM) program, ensuring that key stakeholders are effectively executing their risk assessment and mitigation responsibilities. This role involves coordinating with cross-functional teams to establish program standards, monitor compliance with TPRM policies, and provide oversight to ensure that third-party risks are managed in alignment with company policies and regulatory requirements. The ideal candidate has a strong background in program management, third-party risk, and experience working with diverse stakeholder groups in a governance or oversight role.
What you'll get to do
Program Development & Governance
Lead the design, implementation, and maintenance of the third-party risk management framework, aligning it with industry standards, regulatory requirements, and company policies.
Establish and update policies, procedures, and controls to ensure consistency and effectiveness across all TPRM activities.
Define, implement, and monitor key performance indicators (KPIs) and metrics to evaluate the effectiveness of the TPRM program, using data to drive continuous improvement.
Program Oversight & Governance
Oversee the TPRM program framework, ensuring it aligns with company policies, industry standards, and regulatory requirements.
Develop and implement program standards, templates, and tools to support consistent risk assessment and mitigation across departments.
Monitor key performance indicators (KPIs) for the TPRM program, tracking the effectiveness of risk management activities and identifying areas for improvement.
Stakeholder Coordination & Support
Act as the primary point of contact for TPRM program stakeholders, including representatives from Legal, Compliance, Procurement, IT Security, and Finance, to ensure effective execution of third-party risk activities.
Facilitate regular meetings and working groups with stakeholders to discuss program updates, address challenges, and ensure alignment on TPRM objectives.
Provide guidance and support to stakeholders on the use of TPRM tools, templates, and best practices to streamline risk management efforts.
Support internal and external audits by maintaining accurate documentation of TPRM activities, findings, and remediation plans.
Identify and assess emerging risks within the third-party ecosystem, adapting TPRM strategies as needed to address changes in the regulatory landscape.
Monitoring & Reporting
Develop and maintain TPRM dashboards and reports that provide insights into program performance, including status updates, compliance levels, and risk assessment completion rates.
Create and present regular reports on TPRM program status to senior management, highlighting areas of progress, gaps, and recommendations for improvement.
Monitor stakeholder compliance with TPRM policies and timelines, ensuring timely completion of third-party risk assessments and required follow-ups.
Policy Development & Continuous Improvement
Support the creation, maintenance, and periodic review of TPRM policies, ensuring they remain current with industry standards and regulatory expectations.
Identify and implement continuous improvement initiatives to enhance TPRM processes, increase program efficiency, and reduce risk exposure.
Collaborate with internal audit and compliance teams to support audits of the TPRM program and address any identified gaps or findings.
Training & Awareness
Develop and deliver training sessions to educate stakeholders on TPRM policies, procedures, and best practices.
Create awareness materials and resources to ensure all relevant departments understand their roles and responsibilities within the TPRM program.
Maintain documentation of training sessions and attendance, ensuring records are up-to-date for audit and compliance purposes.
Stakeholder Management & Influencing
Collaborate with key stakeholders across Legal, Compliance, IT Security, Procurement, and Finance to ensure alignment on third-party risk management objectives.
Act as a trusted advisor to stakeholders, providing expertise and insights on TPRM program requirements and best practices.
Influence stakeholders to adopt program improvements and ensure adherence to established risk management processes.
Skills and experience we value
Bachelor’s degree in Business, Risk Management, Supply Chain, or a related field
Relevant certifications in risk management or third-party risk (e.g., Certified Third Party Risk Professional (CTPRP), Certified Information Systems Security Professional (CISSP), or Certified Risk Manager (CRM)) are a plus
5+ years of experience in risk management, compliance, or program management, preferably with experience in third-party risk management
Strong program management skills, with a proven track record of overseeing large-scale programs and driving stakeholder engagement
Familiarity with third-party risk management frameworks, regulatory requirements, and industry best practices
Proficiency in risk management tools and reporting platforms, with strong analytical skills to track and report on program metrics
What’s in it for you
Dayforce is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment.
We encourage individuals to apply based on their passions.
Dayforce encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through competitive pay and benefits.
With a commitment to community impact, including volunteer days and our charity, Dayforce Cares we provide opportunities for you to thrive both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself.
About the Salary Ranges
Please note that the salary range mentioned in this job description should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate’s experience, skills, budget and location. Our company is committed to providing a fair, equitable, and competitive package that reflects the value an individual brings to the organization.
Fraudulent Recruiting
Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Dayforce employee, please refer to our fraudulent recruiting statement found here: https://www.dayforce.com/be-aware-of-recruiting-fraud
Dayforce actively monitors all job applications to ensure authenticity. Submissions determined to be fraudulent or misleading will be declined from the recruitment process
#LI-Remote
Apply Now
Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce.
Our brand promise - Makes Work Life Better™ - Reflects our commitment to employees, customers, partners and communities globally.
About the opportunity
The Cybersecurity Program Manager is responsible for overseeing the third-party risk management (TPRM) program, ensuring that key stakeholders are effectively executing their risk assessment and mitigation responsibilities. This role involves coordinating with cross-functional teams to establish program standards, monitor compliance with TPRM policies, and provide oversight to ensure that third-party risks are managed in alignment with company policies and regulatory requirements. The ideal candidate has a strong background in program management, third-party risk, and experience working with diverse stakeholder groups in a governance or oversight role.
What you'll get to do
Program Development & Governance
Lead the design, implementation, and maintenance of the third-party risk management framework, aligning it with industry standards, regulatory requirements, and company policies.
Establish and update policies, procedures, and controls to ensure consistency and effectiveness across all TPRM activities.
Define, implement, and monitor key performance indicators (KPIs) and metrics to evaluate the effectiveness of the TPRM program, using data to drive continuous improvement.
Program Oversight & Governance
Oversee the TPRM program framework, ensuring it aligns with company policies, industry standards, and regulatory requirements.
Develop and implement program standards, templates, and tools to support consistent risk assessment and mitigation across departments.
Monitor key performance indicators (KPIs) for the TPRM program, tracking the effectiveness of risk management activities and identifying areas for improvement.
Stakeholder Coordination & Support
Act as the primary point of contact for TPRM program stakeholders, including representatives from Legal, Compliance, Procurement, IT Security, and Finance, to ensure effective execution of third-party risk activities.
Facilitate regular meetings and working groups with stakeholders to discuss program updates, address challenges, and ensure alignment on TPRM objectives.
Provide guidance and support to stakeholders on the use of TPRM tools, templates, and best practices to streamline risk management efforts.
Support internal and external audits by maintaining accurate documentation of TPRM activities, findings, and remediation plans.
Identify and assess emerging risks within the third-party ecosystem, adapting TPRM strategies as needed to address changes in the regulatory landscape.
Monitoring & Reporting
Develop and maintain TPRM dashboards and reports that provide insights into program performance, including status updates, compliance levels, and risk assessment completion rates.
Create and present regular reports on TPRM program status to senior management, highlighting areas of progress, gaps, and recommendations for improvement.
Monitor stakeholder compliance with TPRM policies and timelines, ensuring timely completion of third-party risk assessments and required follow-ups.
Policy Development & Continuous Improvement
Support the creation, maintenance, and periodic review of TPRM policies, ensuring they remain current with industry standards and regulatory expectations.
Identify and implement continuous improvement initiatives to enhance TPRM processes, increase program efficiency, and reduce risk exposure.
Collaborate with internal audit and compliance teams to support audits of the TPRM program and address any identified gaps or findings.
Training & Awareness
Develop and deliver training sessions to educate stakeholders on TPRM policies, procedures, and best practices.
Create awareness materials and resources to ensure all relevant departments understand their roles and responsibilities within the TPRM program.
Maintain documentation of training sessions and attendance, ensuring records are up-to-date for audit and compliance purposes.
Stakeholder Management & Influencing
Collaborate with key stakeholders across Legal, Compliance, IT Security, Procurement, and Finance to ensure alignment on third-party risk management objectives.
Act as a trusted advisor to stakeholders, providing expertise and insights on TPRM program requirements and best practices.
Influence stakeholders to adopt program improvements and ensure adherence to established risk management processes.
Skills and experience we value
Bachelor’s degree in Business, Risk Management, Supply Chain, or a related field
Relevant certifications in risk management or third-party risk (e.g., Certified Third Party Risk Professional (CTPRP), Certified Information Systems Security Professional (CISSP), or Certified Risk Manager (CRM)) are a plus
5+ years of experience in risk management, compliance, or program management, preferably with experience in third-party risk management
Strong program management skills, with a proven track record of overseeing large-scale programs and driving stakeholder engagement
Familiarity with third-party risk management frameworks, regulatory requirements, and industry best practices
Proficiency in risk management tools and reporting platforms, with strong analytical skills to track and report on program metrics
What’s in it for you
Dayforce is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace ALL individuals and what makes them unique. We believe our employees should be happy and healthy, with peace of mind and a sense of fulfillment.
We encourage individuals to apply based on their passions.
Dayforce encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through competitive pay and benefits.
With a commitment to community impact, including volunteer days and our charity, Dayforce Cares we provide opportunities for you to thrive both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself.
About the Salary Ranges
Please note that the salary range mentioned in this job description should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate’s experience, skills, budget and location. Our company is committed to providing a fair, equitable, and competitive package that reflects the value an individual brings to the organization.
Fraudulent Recruiting
Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or believe you have been contacted by someone posing as a Dayforce employee, please refer to our fraudulent recruiting statement found here: https://www.dayforce.com/be-aware-of-recruiting-fraud
Dayforce actively monitors all job applications to ensure authenticity. Submissions determined to be fraudulent or misleading will be declined from the recruitment process
#LI-Remote
Apply Now