Enterprise Security Manager

Canva

. Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy .

Posted 11/2/2026full-timeRemote • New ZealandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security teams and developing internal security strategies while balancing usability, compliance, and developer experience. Proficient in threat modeling, project management, and collaboration with cross-functional teams to enhance security systems.

Highest-signal resume keywords

Team ManagementThreat ModelingSecurity Strategy DevelopmentProject ManagementSecurity Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecurity Risk IdentificationMitigation Strategy DevelopmentProject ManagementPythonGolangJavaInfrastructure as CodeIdentity Management TechnologiesZero Trust

Soft Skills

CoachingCollaborationFeedback DeliveryCommunication

Tools & Technologies

IDPsSSPMMDMsPassword ManagersMFASAMLWebAuthnOkta

Certifications & Qualifications

SOC2ISO27001GDPR

Industry Keywords

Security ComplianceInternal IT EnvironmentsSaaS SolutionsSecurity Market

Tech Stack

Tools & technologies

JavaPythonTerraformGo

About the role

Key responsibilities & impact

Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy
Own Canva’s internal security strategy, balancing security, compliance and developer experience
Coach and develop engineers through regular, practical feedback
Own team ways of working, including sprint planning, stand-ups and retrospectives
Collaborate with IT, Sales, Customer Support and other partner groups to deliver scalable security improvements
Drive internal adoption of security systems and champion their benefits

Requirements

What you’ll need

Ability to build an access strategy balancing usability, security and compliance requirements
Prior experience managing and growing high-performing teams
Proven ability to threat model complex systems, identify security risks, develop mitigation strategies with engineering teams, and deliver them
Proven experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions
Good understanding of internal IT environments and the surrounding security market
Experience with zero trust, IDPs, SSPM, MDMs, password managers and related technologies
Ability to run large, complex projects across multiple groups, define completion criteria, track metrics and deliver company-scale communications
Beneficial: proficiency in Python, Golang or Java, with ability to mentor others
Beneficial: familiarity with infrastructure as code such as Terraform
Beneficial: experience with identity management technologies including MFA, SAML, WebAuthn and Okta
Beneficial: understanding of SOC2, ISO27001 and GDPR
Interviews conducted virtually

Benefits

Comp & perks

Equity packages
Inclusive parental leave policy that supports all parents & carers
Annual Vibe & Thrive allowance to support wellbeing, social connection, office setup & more
Flexible leave options
Virtual interviews