Enterprise Security Manager

Join the team redefining how the world experiences design at Canva, a leading design platform.

The Security Group is responsible for protecting Canva systems and data from information security threats. The group runs programs across Application Security, Risk Management, Enterprise Security, and Threat Detection and Response domains.

As an Enterprise Security Manager, you will manage a team of security engineers who do a mixture of threat modelling, security tool rollouts, building internal security services, and partnering with other teams on security strategy. You will own the strategy for internal security at Canva, balancing security, compliance, and developer experience to build an experience that allows Canvanauts to move quickly, while having secure guardrails in place.

Key responsibilities:

• Manage a team of security engineers
• Develop and implement internal security strategy
• Coach and develop engineers
• Collaborate with other teams to build security improvements
• Drive adoption of systems internally

Required experience:

• Ability to build a strategy around access that balances usability, security, and compliance requirements
• Prior experience managing and growing high-performing teams
• Proven ability to threat model complex systems and develop mitigation strategies
• Experience working with external stakeholder teams
• Good understanding of internal IT environments and security market

Beneficial experience:

• Proficiency in one or more programming/scripting languages (Python, Golang, Java)
• Familiarity with infrastructure as code (Terraform)
• Experience working with identity management technologies (MFA, SAML, WebAuthn, Okta)
• Understanding of common compliance frameworks (SOC2, ISO27001, GDPR)

Benefits:

• Equity packages
• Inclusive parental leave policy
• Annual Vibe & Thrive allowance
• Flexible leave options