Engineering Manager - Enterprise Security Manager
Canva is seeking an Engineering Manager for its Enterprise Security team to lead efforts in safeguarding internal systems and data. This role is pivotal in ensuring the security of Canva's internal endpoints, networks, systems, and data, which are utilized by all employees. The Security Group at Canva is dedicated to protecting the company's systems and data from information security threats, encompassing areas such as Application Security, Risk Management, Enterprise Security, and Threat Detection and Response. The Internal Systems Security team (ISS) focuses on securing internal endpoints, networks, systems, and data, building and managing services that support device posture, secure credentials, and secure SaaS applications at scale. Collaboration with teams like IT, Sales, and Customer Support is essential to integrate security measures early in their development processes.
As the Engineering Manager, you will oversee a team of security engineers engaged in threat modeling, deploying security tools, developing internal security services, and collaborating with other teams on security strategies. You will be responsible for formulating the internal security strategy at Canva, balancing security, compliance, and developer experience to create an environment that enables rapid movement while maintaining secure guardrails. Your role will also involve coaching and developing engineers by providing regular, constructive feedback to support their personal growth goals. Managing the team's workflows, including sprint planning, stand-ups, and retrospectives, will be crucial to maintain a high-performing team. Additionally, you will work closely with partner groups such as IT, Sales, and Customer Support to implement security improvements that scale beyond your team. Promoting the adoption of internal systems and championing the benefits of the security measures you build will also be part of your responsibilities.
Ideal candidates should possess the ability to develop strategies around access that balance usability, security, and compliance requirements, adapting to changing user patterns. Experience in managing and growing high-performing teams is essential. A proven track record in threat modeling complex systems, identifying security risks, developing mitigation strategies with engineering teams, and overseeing their implementation is required. Experience collaborating with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions is also necessary. A solid understanding of internal IT environments and related security markets, including topics like Zero Trust, IDPs, SSPM, MDMs, and Password Managers, is important. The ability to lead large, complex projects across multiple groups, define project completion criteria, track metrics, and communicate effectively at the company scale is crucial. Beneficial experiences include proficiency in programming or scripting languages such as Python, Golang, or Java, familiarity with infrastructure as code tools like Terraform, experience with identity management technologies (e.g., MFA, SAML, WebAuthn, Okta), and an understanding of common compliance frameworks like SOC2, ISO27001, and GDPR.
While specific compensation details are not provided, Canva offers a comprehensive benefits package that includes equity packages, an inclusive parental leave policy supporting all parents and carers, an annual Vibe & Thrive allowance to support wellbeing, social connection, office setup, and more, as well as flexible leave options that empower employees to be a force for good, take time to recharge, and support personal needs.
Joining Canva means becoming part of a team that is redefining how the world experiences design. The company fosters a culture of collaboration and innovation, aiming to empower individuals to create high-impact visual content and scale internal collaboration. As an Engineering Manager in the Enterprise Security team, you will play a pivotal role in ensuring the security and integrity of Canva's internal systems, contributing to the company's mission to make design accessible and secure for all.