Senior Manager of Enterprise Security, Strava

• 10+ years of experience designing, building, and operating Enterprise Security programs in modern cloud-first environments
• 3+ years leading security engineering teams, with experience coaching engineers while remaining technically engaged
• Strong communication and stakeholder management skills, with the ability to influence cross-functional partners and executives through clear, risk-based decision making
• Deep expertise in operating enterprise security capabilities at scale, including MFA, SSO,OAuth, MDM, EDR, device compliance and fleet management across macOS and Windows
• Experience working with tooling such as Okta, Intune, Jamf, ZTNA, Sailpoint, GWS, Slack, Github
• Experience designing enterprise security architectures that balance strong security with employee productivity and developer velocity
• Experience managing strategic security vendors and managed service providers

Desirable

• Strava's Cybersecurity team protects the trust of over 200 million athletes by securing our platform, our data, and the systems our community depends on every day
• Enterprise Security Engineering owns the engineering, architecture, and operation of the systems that secure Strava's workforce and corporate environment across a globally distributed company
• As the Senior Manager of Enterprise Security Engineering, you will own the strategy and execution of Strava's corporate security program
• Reporting directly to the CISO, you will lead a lean, high-performing engineering team responsible for securing Strava's internal environment while partnering across the business to enable secure growth
• This is a highly technical leadership role. You'll define the long-term roadmap and operating model for the function, including which capabilities Strava owns internally versus delivers through strategic partners, while balancing strategic leadership with execution and making risk-based decisions that strengthen security without slowing the business down
• Own and execute the enterprise security roadmap across corporate identity, endpoint, email, corporate network and SaaS security
• Lead a small team of enterprise security engineers, fostering a culture of technical excellence, operational rigor and ownership
• Stay hands-on by designing, building, and configuring security capabilities alongside your team when needed
• Build an operating model that combines internal engineering with strategic partners, determining what should be owned in-house and holding vendors accountable for measurable security outcomes
• Architect and evolve Strava's identity and access management platform, including SSO, MFA, privileged access, identity governance, lifecycle automation, and Zero Trust principles across cloud and SaaS environments
• Secure Strava's enterprise environment by driving the architecture, hardening, and automation of endpoints, enterprise networking, email, collaboration platforms, SaaS applications, and third-party integrations
• Develop and execute strategies for enterprise AI security, data security, vulnerability and exposure management, and continuous hardening of the corporate environment
• Partner closely with IT, Engineering, Legal, People, Workplace to build secure-by-default experiences
• Partner with the Detection & Response team during corporate-related security incidents
• Communicate priorities, risks, and measurable outcomes to the CISO and senior leadership