Enterprise Security Manager

This is a fully remote position, open to applicants in Australia.

📋 Description

• Lead a team of security engineers focused on threat modeling, implementing security tools, providing internal security services, and formulating security strategies.

• Take ownership of Canva's internal security strategy while maintaining a balance between security, compliance, and developer experience.

• Mentor and develop engineers through consistent, actionable feedback.

• Oversee team operations, including sprint planning, daily stand-ups, and retrospectives.

• Work collaboratively with IT, Sales, Customer Support, and other partner organizations to enhance scalable security measures.

• Promote the internal adoption of security systems and advocate for their advantages.

⛳️ Requirements

• Capability to create an access strategy that balances usability with security and compliance needs.

• Previous experience in managing and nurturing high-performing teams.

• Demonstrated ability to conduct threat modeling for complex systems, identify security vulnerabilities, develop mitigation strategies in collaboration with engineering teams, and implement them effectively.

• Proven track record of working with external stakeholder teams, such as IT and Procurement, to deliver secure SaaS solutions.

• Strong understanding of internal IT environments and the associated security landscape.

• Familiarity with zero trust, Identity Providers (IDPs), Security Service Posture Management (SSPM), Mobile Device Management (MDMs), and password management systems.

• Ability to manage large, complex projects across multiple teams, define completion criteria, monitor metrics, and communicate effectively at a company-wide level.

• Preferred: proficiency in Python, Golang, or Java, with the capability to mentor others.

• Preferred: knowledge of infrastructure as code tools such as Terraform.

• Preferred: experience with identity management technologies, including Multi-Factor Authentication (MFA), SAML, WebAuthn, and Okta.

• Preferred: familiarity with compliance frameworks such as SOC2, ISO27001, and GDPR.

🏝️ Benefits

• Equity packages.

• An inclusive parental leave policy that supports all parents and caregivers.

• Annual Vibe & Thrive allowance to promote wellbeing, social connection, office setup, and more.

• Flexible leave options.

• Virtual interviews.