Enterprise Security Manager

This is a fully remote position, open to applicants in Australia.

📋 Description

• Oversee a team of security engineers focused on threat modeling, security tool deployments, internal security services, and strategic security initiatives.

• Take ownership of Canva’s internal security strategy, ensuring a balance between security, compliance, and developer experience.

• Mentor and develop engineers by providing regular, actionable feedback.

• Manage team processes, including sprint planning, daily stand-ups, and retrospectives.

• Collaborate with IT, Sales, Customer Support, and other departments to implement scalable security enhancements.

• Promote the internal adoption of security systems and advocate for their advantages.

⛳️ Requirements

• Capacity to create an access strategy that balances usability, security, and compliance needs.

• Previous experience in managing and nurturing high-performing teams.

• Demonstrated ability to threat model intricate systems, pinpoint security vulnerabilities, devise mitigation strategies alongside engineering teams, and implement them.

• Proven experience collaborating with external stakeholders, such as IT and Procurement, to provide secure SaaS solutions.

• Strong understanding of internal IT environments and the associated security landscape.

• Familiarity with Zero Trust, Identity Providers (IDPs), Security Service Posture Management (SSPM), Mobile Device Management (MDMs), and password management solutions.

• Proficient in executing large, complex projects across multiple teams, establishing completion criteria, monitoring metrics, and delivering organization-wide communications.

• Preferred: proficiency in programming languages such as Python, Golang, or Java.

• Preferred: knowledge of infrastructure as code tools, including Terraform.

• Preferred: experience with identity management technologies, including Multi-Factor Authentication (MFA), SAML, WebAuthn, and Okta.

• Preferred: understanding of compliance frameworks such as SOC2, ISO27001, and GDPR.

🏝️ Benefits

• Equity packages.

• Inclusive parental leave policy that supports all parents and caregivers.

• Annual Vibe & Thrive allowance to promote wellbeing, social connections, office setup, and more.

• Flexible leave options.

• Virtual interviews.