Cybersecurity Program Manager

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. 

 

Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity and compliance for the global workforce.

 

Our brand promise - Makes Work Life Better™ - Reflects our commitment to employees, customers, partners and communities globally. 

 

About the opportunity

The Cybersecurity Program Manager is responsible for overseeing the third-party risk management (TPRM) program, ensuring that key stakeholders are effectively executing their risk assessment and mitigation responsibilities. This role involves coordinating with cross-functional teams to establish program standards, monitor compliance with TPRM policies, and provide oversight to ensure that third-party risks are managed in alignment with company policies and regulatory requirements. The ideal candidate has a strong background in program management, third-party risk, and experience working with diverse stakeholder groups in a governance or oversight role.

What you'll get to do

Program Development & Governance

• Lead the design, implementation, and maintenance of the third-party risk management framework, aligning it with industry standards, regulatory requirements, and company policies.
• Establish and update policies, procedures, and controls to ensure consistency and effectiveness across all TPRM activities.
• Define, implement, and monitor key performance indicators (KPIs) and metrics to evaluate the effectiveness of the TPRM program, using data to drive continuous improvement.

Program Oversight & Governance

• Oversee the TPRM program framework, ensuring it aligns with company policies, industry standards, and regulatory requirements.
• Develop and implement program standards, templates, and tools to support consistent risk assessment and mitigation across departments.
• Monitor key performance indicators (KPIs) for the TPRM program, tracking the effectiveness of risk management activities and identifying areas for improvement.

Stakeholder Coordination & Support

• Act as the primary point of contact for TPRM program stakeholders, including representatives from Legal, Compliance, Procurement, IT Security, and Finance, to ensure effective execution of third-party risk activities.
• Facilitate regular meetings and working groups with stakeholders to discuss program updates, address challenges, and ensure alignment on TPRM objectives.
• Provide guidance and support to stakeholders on the use of TPRM tools, templates, and best practices to streamline risk management efforts.
• Support internal and external audits by maintaining accurate documentation of TPRM activities, findings, and remediation plans.
• Identify and assess emerging risks within the third-party ecosystem, adapting TPRM strategies as needed to address changes in the regulatory landscape.

Monitoring & Reporting

• Develop and maintain TPRM dashboards and reports that provide insights into program performance, including status updates, compliance levels, and risk assessment completion rates.
• Create and present regular reports on TPRM program status to senior management, highlighting areas of progress, gaps, and recommendations for improvement.
• Monitor stakeholder compliance with TPRM policies and timelines, ensuring timely completion of third-party risk assessments and required follow-ups.

Policy Development & Continuous Improvement

• Support the creation, maintenance, and periodic review of TPRM policies, ensuring they remain current with industry standards and regulatory expectations.
• Identify and implement continuous improvement initiatives to enhance TPRM processes, increase program efficiency, and reduce risk exposure.
• Collaborate with internal audit and compliance teams to support audits of the TPRM program and address any identified gaps or findings.

Training & Awareness

• Develop and deliver training sessions to educate stakeholders on TPRM policies, procedures, and best practices.
• Create awareness materials and resources to ensure all relevant departments understand their roles and responsibilities within the TPRM program.
• Maintain documentation of training sessions and attendance, ensuring records are up-to-date for audit and compliance purposes.

Stakeholder Management & Influencing

• Collaborate with key stakeholders across Legal, Compliance, IT Security, Procurement, and Finance to ensure alignment on third-party risk management objectives.
• Act as a trusted advisor to stakeholders, providing expertise and insights on TPRM program requirements and best practices.
• Influence stakeholders to adopt program improvements and ensure adherence to established risk management processes.

Skills and experience we value

• Bachelor’s degree in Business, Risk Management, Supply Chain, or a related field
• Relevant certifications in risk management or third-party risk (e.g., Certified Third Party Risk Professional (CTPRP), Certified Information Systems Security Professional (CISSP), or Certified Risk Manager (CRM)) are a plus
• 5+ years of experience in risk management, compliance, or program management, preferably with experience in third-party risk management
• Strong program management skills, with a proven track record of overseeing large-scale programs and driving stakeholder engagement
• Familiarity with third-party risk management frameworks, regulatory requirements, and industry best practices
• Proficiency in risk management tools and reporting platforms, with strong analytical skills to track and report on program metrics