Remote opportunity at
CanvaEnterprise Security Manager
Canva is hiring an Enterprise Security Manager to lead its Internal Systems Security team on a remote basis. This position involves protecting company networks, systems, internal…
Career Tools
About This Role
Canva is hiring an Enterprise Security Manager to lead its Internal Systems Security team on a remote basis. This position involves protecting company networks, systems, internal endpoints, and data by establishing reliable security frameworks. The person in this role will balance rigorous protection measures with efficient developer workflows and user experience, especially regarding AI tooling adoption. Candidates should expect their AI coding, System Design, and security review skills to be…
Job Description
Canva is hiring an Enterprise Security Manager to lead its Internal Systems Security team on a remote basis. This position involves protecting company networks, systems, internal endpoints, and data by establishing reliable security frameworks. The person in this role will balance rigorous protection measures with efficient developer workflows and user experience, especially regarding AI tooling adoption. Candidates should expect their AI coding, System Design, and security review skills to be evaluated during the hiring process.
The role centers on leading security engineers, shaping internal defense strategies, and collaborating with cross-functional groups such as IT, Sales, and Customer Support. Ideal candidates will possess a background in managing high-performing technical teams, designing access control strategies, and threat-modeling complex systems.
Responsibilities
- Manage a team of security engineers performing threat modeling, rolling out security tools, building internal services, and guiding security strategy
- Define the internal security strategy while balancing compliance, protection, and developer experience
- Coach and develop engineering staff through regular feedback aligned with personal growth goals
- Oversee daily operations including sprint planning, stand-ups, and retrospectives
- Partner with groups like IT, Sales, and Customer Support to deliver scalable security improvements
- Drive internal adoption of security systems and champion their benefits
Requirements
- Ability to create access strategies that balance usability, security, and compliance
- Prior experience managing and growing high-performing technical teams
- Proven threat-modeling expertise for complex systems, including risk identification and mitigation delivery
- Experience partnering with external stakeholder teams such as IT and Procurement to deploy secure SaaS solutions
- Understanding of internal IT environments and the surrounding security market, including zero trust, IDPs, SSPM, MDMs, and password managers
- Experience running complex multi-group projects, establishing completion criteria, tracking metrics, and communicating at scale
Qualifications
- Proficiency in one or more programming or scripting languages such as Python, Golang, or Java
- Familiarity with infrastructure as code tools like Terraform
- Experience utilizing identity management technologies including MFA, SAML, WebAuthn, and Okta
- Knowledge of compliance frameworks such as SOC2, ISO27001, and GDPR
Core Skills
Benefits
- Equity packages
- Inclusive parental leave policy supporting all parents and carers
- Annual Vibe and Thrive allowance for wellbeing, social connection, and office setup
- Flexible leave options
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting specifies that the role is remote, and interviews are conducted virtually.
What is the employment type?
The posting lists the employment type as full-time.
What salary is offered for this role?
The salary is not stated in the job posting.
What technical skills will be assessed during the interview?
Candidates will be assessed on their AI coding, security review, and System Design skills.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
