Enterprise Security Manager

This is a fully remote position, open to applicants in New Zealand.

📋 Description

• Oversee a team of security engineers focused on threat modeling, the deployment of security tools, internal security services, and the overarching security strategy.

• Take ownership of Canva’s internal security strategy, ensuring a balance between security, compliance, and developer experience.

• Mentor and develop engineers by providing consistent, actionable feedback.

• Manage team operational practices, including sprint planning, daily stand-ups, and retrospectives.

• Work in partnership with IT, Sales, Customer Support, and other collaborating teams to implement scalable security enhancements.

• Promote the internal adoption of security systems and advocate for their advantages.

• Safeguard Canva's systems and data against information security threats through both preventive and detective measures.

⛳️ Requirements

• Capability to establish an access strategy that harmonizes usability, security, and compliance needs.

• Previous experience in managing and developing high-performing teams.

• Demonstrated ability to threat model intricate systems, pinpoint security vulnerabilities, devise mitigation strategies with engineering teams, and execute them.

• Proven experience collaborating with external stakeholder groups, such as IT and Procurement, to deliver secure SaaS solutions.

• Strong understanding of internal IT environments and the broader security landscape.

• Familiarity with zero trust principles, Identity Providers (IDPs), Security Service Posture Management (SSPM), Mobile Device Management (MDMs), and password management solutions.

• Proficient in managing large, complex projects involving multiple teams, establishing completion criteria, tracking key metrics, and facilitating company-wide communications.

• Preferred: proficiency in programming languages such as Python, Golang, or Java, with the ability to mentor others on best practices.

• Preferred: knowledge of infrastructure as code tools like Terraform.

• Preferred: experience with identity management technologies, including MFA, SAML, WebAuthn, and Okta.

• Preferred: understanding of compliance frameworks such as SOC2, ISO27001, and GDPR.

• Required: must provide pronouns and specify any reasonable adjustments needed for interviews.

🏝️ Benefits

• Equity packages.

• An inclusive parental leave policy that supports all parents and caregivers.

• Annual Vibe & Thrive allowance to promote wellbeing, social engagement, office setup, and more.

• Flexible leave options.

• Flexible work arrangements.

• Virtual interviews.