Enterprise Security Team Lead

About the role

Canva is looking for a seasoned security professional to lead its Internal Systems Security team. You will shape the strategy for internal security, balancing protection, compliance, and developer experience across the organization.

Key responsibilities

• Manage a team of security engineers delivering threat modelling, security tool rollouts, and internal security services.
• Own and evolve Canva’s internal security strategy, ensuring secure guardrails while enabling rapid development.
• Coach and develop engineers through regular feedback and performance planning.
• Drive agile processes including sprint planning, stand‑ups, and retrospectives to maintain a high‑performing team.
• Collaborate with IT, Sales, Customer Support and other partners to scale security improvements.
• Champion adoption of security systems and communicate benefits across the company.

Required profile

• Proven experience building access strategies that balance usability, security, and compliance.
• Prior experience managing and growing high‑performing security teams.
• Demonstrated ability to threat model complex systems and deliver mitigation strategies.
• Experience working with external stakeholders (IT, Procurement) to deliver secure SaaS solutions.
• Strong project management skills for large, cross‑functional initiatives.

Required skills

• Python, Golang, or Java programming/scripting.
• Infrastructure as Code tools such as Terraform.
• Identity management technologies (MFA, SAML, WebAuthn, Okta).
• Knowledge of zero‑trust, IDPs, SSPM, MDM, password managers, and related security concepts.
• Familiarity with compliance frameworks like SOC 2, ISO 27001, GDPR.

What we offer

• Equity packages.
• Inclusive parental leave for all parents and carers.
• Annual Vibe & Thrive allowance for wellbeing and office setup.
• Flexible leave options supporting personal and social impact.