Назад
3 дня назад

Enterprise Security Manager (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Australia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Enterprise Security Manager (Cybersecurity): Managing internal security engineering teams and defining Canva’s enterprise security strategy with an accent on access management, threat modeling, secure SaaS adoption, and developer experience. Focus on balancing security, compliance, and usability, delivering complex cross-functional security programs, and building secure internal services and guardrails.

Location: Sydney, Australia

Company

Canva is redefining how the world experiences design through its product platform.

What you will do

  • Manage security engineers working on threat modeling, security tool rollouts, internal security services, and security strategy.
  • Own the internal security strategy, balancing security, compliance, and developer experience.
  • Coach and develop engineers through regular practical feedback.
  • Own team ways of working, including sprint planning, stand-ups, and retrospectives.
  • Partner with IT, Sales, Customer Support, Procurement, and other groups to deliver scalable security improvements and secure SaaS solutions.
  • Drive internal adoption of security systems and communicate their benefits across Canva.

Requirements

  • Ability to build access strategies that balance usability, security, and compliance as user patterns change.
  • Experience managing and growing high-performing teams.
  • Proven ability to threat model complex systems, identify risks, develop mitigation strategies with engineering teams, and deliver them.
  • Experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions.
  • Strong understanding of internal IT environments and the surrounding security market, including zero trust, IDPs, SSPM, MDMs, and password managers.
  • Ability to run large, complex projects across multiple groups, define completion criteria, track metrics, and deliver company-wide communications.

Nice to have

  • Programming or scripting proficiency in one or more of Python, Golang, or Java, with the ability to mentor others on best practices.
  • Familiarity with infrastructure as code, such as Terraform.
  • Experience with identity management technologies including MFA, SAML, WebAuthn, and Okta.
  • Understanding of compliance frameworks such as SOC2, ISO27001, and GDPR.

Culture & Benefits

  • Full-time role with flexible leave options.
  • Equity package.
  • Inclusive parental leave for parents and carers.
  • Annual Vibe & Thrive allowance for wellbeing, social connection, office setup, and related needs.
  • Interviews are conducted virtually.

Hiring process

  • Interview assessment includes AI coding, security review, and system design skills.
  • When applying, provide preferred pronouns and any reasonable interview adjustments needed.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →