Enterprise Security Manager

This is a fully remote position, open to applicants in Australia.

📋 Description

• Lead a team of security engineers focused on threat modeling, the implementation of security tools, internal security services, and overall security strategy.

• Take ownership of Canva’s internal security approach, ensuring a balance between security, compliance, and developer experience.

• Mentor and nurture engineers by providing consistent, actionable feedback.

• Manage the team's operational processes, including sprint planning, daily stand-ups, and retrospective meetings.

• Collaborate with IT, Sales, Customer Support, and other partner teams to enhance scalable security solutions.

• Advocate for the internal adoption of security systems and promote their advantages.

• Safeguard Canva’s systems and data against information security threats through both preventive and detective measures.

• Evaluate AI coding, security review, and system design capabilities during the recruitment process.

⛳️ Requirements

• Ability to devise a strategy for access that harmonizes usability with security and compliance obligations.

• Previous experience in managing and developing high-performing teams.

• Demonstrated proficiency in threat modeling complex systems, recognizing security vulnerabilities, formulating mitigation strategies with engineering teams, and ensuring successful implementation.

• Established experience working with external stakeholders such as IT and Procurement to provide secure SaaS solutions.

• Solid understanding of internal IT environments as well as the security landscape.

• Experience with Zero Trust, Identity Providers (IDPs), Security Service Posture Management (SSPM), Mobile Device Management (MDMs), Password Managers, and related technologies.

• Capability to oversee large, intricate projects across multiple teams, define completion criteria, monitor metrics, and communicate effectively at a company-wide level.

• Proficient in one or more programming/scripting languages, with the ability to guide others in at least one: Python, Golang, Java (helpful, but not mandatory).

• Familiarity with infrastructure as code tools, such as Terraform (helpful, but not mandatory).

• Experience with identity management technologies, including MFA, SAML, WebAuthn, and Okta (helpful, but not mandatory).

• Understanding of compliance frameworks such as SOC2, ISO27001, and GDPR (helpful, but not mandatory).

• Candidates are encouraged to provide their pronouns and any reasonable adjustments needed for the interview process.

🏝️ Benefits

• Equity packages - we want our success to be yours as well.

• An inclusive parental leave policy that supports all parents and caregivers.

• An annual Vibe & Thrive allowance to promote your wellbeing, social connections, office setup, and more.

• Flexible leave options that empower you to contribute positively, take necessary time to recharge, and support your personal needs.

• Interviews conducted virtually.