Enterprise Security Manager

Canva

. Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy .

Posted 11/6/2026full-timeRemote • AustraliaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security teams and developing internal security strategies while balancing compliance and developer experience. Proficient in threat modeling, security risk mitigation, and collaboration with cross-functional teams to enhance security systems.

Highest-signal resume keywords

Team ManagementThreat ModelingSecurity Strategy DevelopmentProject ManagementCompliance Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecurity Risk MitigationProject ManagementProgramming LanguagesInfrastructure as Code

Soft Skills

CoachingCollaborationFeedback Delivery

Tools & Technologies

Zero TrustIDPsSSPMMDMsPassword ManagersMFASAMLWebAuthnOktaTerraform

Certifications & Qualifications

SOC2ISO27001GDPR

Industry Keywords

Security MarketSaaS SolutionsInternal IT Environments

Tech Stack

Tools & technologies

JavaPythonTerraformGo

About the role

Key responsibilities & impact

Manage a team of security engineers working on threat modelling, security tool rollouts, internal security services and security strategy
Own Canva’s internal security strategy, balancing security, compliance and developer experience
Coach and develop engineers through regular, practical feedback
Own team ways of working, including sprint planning, stand-ups and retrospectives
Collaborate with IT, Sales, Customer Support and other partner groups on scalable security improvements
Drive internal adoption of security systems and champion their benefits

Requirements

What you’ll need

Prior experience managing and growing high performing teams
Proven ability to threat model complex systems, identify security risks, develop mitigation strategies with engineering teams, and see it through to delivery
Proven experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions
Good understanding of internal IT environments and the security market
Experience with Zero Trust, IDPs, SSPM, MDMs, password managers and related technologies
Ability to run large, complex projects across multiple groups, define completion criteria, track metrics and deliver communications at company scale
Proficiency in one or more programming/scripting languages: Python, Golang or Java (beneficial, not required)
Familiarity with infrastructure as code, such as Terraform (beneficial, not required)
Experience with identity management technologies including MFA, SAML, WebAuthn and Okta (beneficial, not required)
Understanding of compliance frameworks including SOC2, ISO27001 and GDPR (beneficial, not required)

Benefits

Comp & perks

Equity packages
Inclusive parental leave policy that supports all parents & carers
Annual Vibe & Thrive allowance to support wellbeing, social connection, office setup & more
Flexible leave options
Virtual interviews