Enterprise Security Team Lead

Responsibilities

• Managing a team of security engineers performing threat modelling, security tool rollouts, and building internal security services
• Owning the strategy for internal security at Canva, balancing security, compliance, and developer experience
• Coaching and developing engineers through regular, practical feedback
• Managing team ways of work including sprint planning, stand-ups, and retrospectives
• Collaborating with partner groups like IT, Sales, and Customer Support to build scalable security improvements
• Driving internal adoption of security systems and championing their benefits

Requirements

• Ability to build access strategies that balance usability, security, and compliance
• Prior experience managing and growing high-performing teams
• Proven ability to threat model complex systems and develop mitigation strategies
• Experience working with external stakeholder teams such as IT and Procurement to deliver secure SaaS solutions
• Strong understanding of internal IT environments and the security market (Zero trust, IDPs, SSPM, MDMs, etc.)
• Ability to run large, complex projects across multiple groups and track metrics

Preferred Qualifications

• Proficiency in Python, Golang, or Java
• Familiarity with Infrastructure as Code (e.g., Terraform)
• Experience with identity management technologies (MFA, SAML, WebAuthn, Okta)
• Understanding of compliance frameworks like SOC2, ISO27001, or GDPR

Benefits

• Equity packages
• Inclusive parental leave policy
• Annual Vibe & Thrive allowance
• Flexible leave options