Play a key role in shaping and advancing product cybersecurity across our R&D organization, focusing on governance, risk management, secure development practices, and regulatory compliance.
Responsibilities
Own and continuously improve the Secure Software Development Lifecycle (SSDLC) program across DHS R&D product teams
Drive cybersecurity maturity improvements and support teams in adopting security best practices and controls
Lead security governance activities, including threat model reviews, security architecture assessments, and risk management processes
Establish and maintain medical device cybersecurity processes supporting regulatory requirements and audit readiness
Act as a trusted cybersecurity advisor for product teams, architects, auditors, notified bodies, and other stakeholders
Lead and develop the organization’s information security strategy, risk management, incident response, and security operations across a global, cloud‑based fintech platform.
Responsibilities
Develop and implement a group‑wide information security strategy and roadmap
Assess vulnerabilities, prioritise risks and establish remediation ownership
Embed security by design across software development, infrastructure, cloud services and business systems
Lead incident response for significant security incidents
Own business continuity and disaster recovery plans
Help establish and execute a broad strategic vision for the security risk program at Canonical, focusing on risk identification, quantification, impact analysis, and modelling.
Compensation
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus.
Responsibilities
Define Canonical's security risk management standards and playbooks
Analyse and improve Canonical's security risk practices
Evaluate, select and implement new security requirements, tools and practices
Grow the presence and thought leadership of Canonical security risk management practice
Develop Canonical security risk learning and development materials
The Infosec and Threat Assessment Manager will conduct testing for Emirates NBD infosec assets through focused threat-based methodologies, to identify, expose and exploit vulnerabilities to improve Cyber readiness and review security controls and system configurations across IT systems across the group to ensure their security posture and compliance.
Responsibilities
Develop and manage the Security Assessment program
Maintain the organization’s security assessment service portfolio and related service catalogue
Develop and operationalize the Threat Modelling framework
Plan and conduct cyber security assessments across systems, installations, applications, infrastructure, networks, APIs, and controls
Review security controls and system configurations to ensure they are effective, optimized, and compliant
Requirements
Bachelors or Master’s degree in Computer Science, Mathematics or equivalent discipline
Master’s degree in Business Management or equivalent
Define the strategic direction and security frameworks for AI systems at scale, and lead the design and implementation of controls across model training pipelines, inference endpoints, and AI-powered features across Canva's platform
Lead and manage long‑term security programs for AWS, coordinating with customers, partners, and internal teams to design, implement, and improve security solutions and compliance frameworks.
Locations (2)
Sydney, New South Wales, Australia
Melbourne, Victoria, Australia
Responsibilities
Coordinate security‑related engagements with internal and external customers
Identify and plan security packages of work and deliver within agreed timeframes
Implement ISM, PSPF, DSPF, ASIO T4, NIST and other compliance frameworks
Remove roadblocks and manage competing priorities in a fast‑paced environment
Create and support cross‑functional working groups and projects
Requirements
Bachelor's or equivalent in Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management
Nice to have: Implementing and operationalising security to meet business outcomes
Lead novel research into emerging AI security threats and attack vectors, and drive threat modelling, vulnerability assessments, and penetration testing focused on risks such as prompt injection, model poisoning, and data extraction
Serve as the technical authority for AI security across Canva by leading security reviews and code assessments for AI use cases, identifying risks and providing actionable recommendations to mitigate potential threats
Drive the strategy and development of detection rules and response playbooks tailored to AI-specific security incidents and anomalous behaviour, ensuring they scale across Canva’s AI footprint
Lead organisation-wide AI security standards and best practices by collaborating with stakeholders across the business (including executive leadership) to embed secure-by-design workflows, and mentor and guide other security engineers working on AI initiatives