FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing security teams and developing internal security strategies while balancing usability, compliance, and developer experience. Proficient in threat modeling, security risk mitigation, and implementing security systems across diverse stakeholder groups.
Highest-signal resume keywords
Team ManagementThreat ModelingSecurity Strategy DevelopmentProject ManagementSecurity Compliance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat ModelingSecurity Risk MitigationProject ManagementPythonGolangJavaInfrastructure as CodeIdentity ManagementZero TrustSecurity Tool Rollouts
Soft Skills
CoachingCollaborationFeedback DeliveryCommunication
Tools & Technologies
MFASAMLWebAuthnOktaPassword ManagersMDMsIDPsSSPMTerraform
Certifications & Qualifications
SOC2ISO27001GDPR
Industry Keywords
Information SecurityComplianceSecurity StrategyInternal IT EnvironmentsSaaS Solutions
Tech Stack
Tools & technologiesJavaPythonTerraformGo
About the role
Key responsibilities & impact- Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy
- Own Canva’s internal security strategy, balancing security, compliance and developer experience
- Coach and develop engineers through regular, practical feedback
- Own team ways of working, including sprint planning, stand-ups and retrospectives
- Collaborate with IT, Sales, Customer Support and other partner groups on scalable security improvements
- Drive internal adoption of security systems and champion their benefits
- Protect Canva systems and data from information security threats through preventive and detective controls
Requirements
What you’ll need- Ability to build an access strategy balancing usability, security and compliance requirements
- Prior experience managing and growing high-performing teams
- Proven ability to threat model complex systems, identify security risks, develop mitigation strategies with engineering teams, and deliver them
- Proven experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions
- Good understanding of internal IT environments and the surrounding security market
- Experience with zero trust, IDPs, SSPM, MDMs and password managers
- Ability to run large, complex projects across multiple groups, define completion criteria, track metrics and deliver company-scale communications
- Beneficial: proficiency in Python, Golang or Java and ability to mentor others on best practices
- Beneficial: familiarity with infrastructure as code such as Terraform
- Beneficial: experience with identity management technologies including MFA, SAML, WebAuthn and Okta
- Beneficial: understanding of compliance frameworks such as SOC2, ISO27001 and GDPR
- Must provide pronouns and identify any reasonable interview adjustments needed
Benefits
Comp & perks- Equity packages
- Inclusive parental leave policy that supports all parents & carers
- Annual Vibe & Thrive allowance supporting wellbeing, social connection, office setup & more
- Flexible leave options
- Flexible work arrangements
- Virtual interviews