Enterprise Security Manager

Canva

. Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy .

Posted 11/6/2026full-timeRemote • AustraliaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security strategies that balance usability, security, and compliance while leading high-performing teams. Proficient in threat modeling, security risk mitigation, and collaboration with cross-functional teams to enhance security systems.

Highest-signal resume keywords

Security Strategy DevelopmentThreat ModelingTeam ManagementCross-Functional CollaborationSecurity Compliance Understanding

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecurity Risk MitigationProgramming LanguagesProject ManagementInfrastructure as Code

Soft Skills

CoachingFeedback DeliveryCommunication

Tools & Technologies

Zero TrustIDPsSSPMMDMsPassword ManagersMFASAMLWebAuthnOktaTerraform

Certifications & Qualifications

SOC2ISO27001GDPR

Industry Keywords

Information SecuritySaaS SolutionsInternal IT EnvironmentsSecurity Market

Tech Stack

Tools & technologies

JavaPythonTerraformGo

About the role

Key responsibilities & impact

Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy
Own Canva’s internal security strategy while balancing security, compliance and developer experience
Coach and develop engineers through regular, practical feedback
Own team ways of working, including sprint planning, stand-ups and retrospectives
Collaborate with IT, Sales, Customer Support and other partner groups on scalable security improvements
Drive internal adoption of security systems and champion their benefits
Protect Canva systems and data from information security threats through preventive and detective controls
Assess AI coding, security review and system design skills during the interview process

Requirements

What you’ll need

Ability to build a strategy around access that balances usability, security and compliance requirements
Prior experience managing and growing high performing teams
Proven ability to threat model complex systems, identify security risks, develop mitigation strategies with engineering teams, and see it through to delivery
Proven experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions
Good understanding of internal IT environments and the security market
Experience with Zero Trust, IDPs, SSPM, MDMs, Password Managers and related technologies
Ability to run large, complex projects across multiple groups, set the definition of done, track metrics and deliver communications at company scale
Proficiency in one or more programming/scripting languages, with ability to mentor others in at least one: Python, Golang, Java (beneficial, not required)
Familiarity with infrastructure as code, e.g. Terraform (beneficial, not required)
Experience with identity management technologies: MFA, SAML, WebAuthn, Okta (beneficial, not required)
Understanding of compliance frameworks such as SOC2, ISO27001 and GDPR (beneficial, not required)
Candidates should provide pronouns and any reasonable interview adjustments needed

Benefits

Comp & perks

Equity packages - we want our success to be yours too
Inclusive parental leave policy that supports all parents & carers
An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally
Interviews conducted virtually