Senior Technology Manager - Security Engineering and Architecture

Description & Requirements who we are

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in.

As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.

As the Senior Technology Manager, Security Engineering & Architecture, you will be a key leader within the Technology organization, responsible for shaping and executing the vision for secure, resilient, and scalable technology solutions across a rapidly evolving enterprise. You will lead a multidisciplinary team of security architects and engineers responsible for Security Architecture, Endpoint Security, Attack Surface Management, and Offensive Security capabilities.

This role is critical to establishing and scaling secure-by-design practices across the organization, ensuring security is embedded early in technology decisions and delivery processes. You will partner closely with Enterprise Engineering, Infrastructure, Digital, Product, Data & AI, and Cybersecurity leadership teams to drive security outcomes that balance risk reduction, business enablement, and employee experience. As a strategic leader and player-coach, you will build trusted partnerships, influence technology direction, and develop a high-performing team focused on delivering sustainable security improvements that support the continued growth of the business.

• Develop and execute the strategy, roadmap, and operating model for Security Engineering & Architecture, ensuring alignment with enterprise technology and cybersecurity priorities.
• Lead, coach, and develop a team of security architects and engineers while fostering a culture of accountability, innovation, inclusion, and continuous learning.
• Shape the future of the Security Engineering & Architecture function through organizational design, capability development, and strategic planning.

• Establish and mature the Security Architecture function, including architecture standards, reference patterns, threat modelling practices, and security design assessments.
• Define and operationalize scalable security review processes that embed security requirements throughout the technology lifecycle.
• Partner with engineering and architecture leaders to ensure security is considered early and consistently across technology investments and initiatives.
• Drive adoption of secure-by-design principles that enable teams to deliver secure solutions efficiently and effectively.

• Own the endpoint security strategy, roadmap, and continuous improvement of related controls and platforms.
• Ensure security engineering solutions effectively balance security outcomes, operational excellence, and employee experience.
• Lead the design, implementation, and optimization of security technologies, automation capabilities, and engineering processes that improve organizational resilience.

• Oversee Offensive Security and Attack Surface Management capabilities, ensuring proactive identification and remediation of security exposures.
• Leverage offensive testing, continuous validation, and attack surface intelligence to strengthen preventative controls and reduce organizational risk.
• Drive measurable improvements in security posture through prioritized remediation and continuous risk reduction initiatives.

• Build strong relationships with Enterprise Engineering, Infrastructure, Enterprise Architecture, Product, and Data & AI teams to influence security outcomes and technology decisions.
• Serve as a trusted advisor to technology leaders on security architecture, engineering practices, and risk management.
• Collaborate with Security Operations, GRC, Identity, and other cyber functions to ensure cohesive security strategies and effective execution.

• Establish meaningful metrics and reporting that demonstrate program effectiveness, operational maturity, and risk reduction outcomes.
• Partner with GRC and Risk teams to align security architecture and engineering practices with regulatory, compliance, and enterprise risk management requirements.
• Drive continuous improvement across processes, tooling, and team effectiveness through measurement and operational excellence.

• Evaluate, onboard, and manage strategic vendors and technology partners supporting Security Engineering & Architecture capabilities.
• Develop and manage…