Lead-Cybersecurity Operations

Job Category
:
Information Services and Technology

Requisition Number
: LEADC
002191

• Posted :
  October 9, 2025
• Full-Time
• Hybrid

Showing 1 location

Who we are: BAL is a team of brilliant people who change lives through elite immigration work and collaborative innovation. We pursue the exceptional in all that we do, but never at the expense of our values. There’s no denying our work is demanding, both in volume and pace, but we’re up for the challenge. We love the balance of hard work and fun – so, you’ll see us in jeans as we shatter glass ceilings and conventional stereotypes.

BAL employees feel valued, rewarded, and respected. We seek opportunities to be of service to others and our communities. We are committed to your growth and development, and want to set you up for success here at BAL and beyond.

Who you are: You are looking for work that has a purpose. You aren’t afraid to roll up your sleeves and get stuff done. You learn quickly. You move fast. You embrace challenge and detail as well as creative thinking. You believe you have something unique to contribute and you aren’t afraid to raise your hand. You understand that powering human achievement is ultimately about impacting a real person.

You are looking for a place to grow and an environment where everyone has a spot and is genuinely welcome.

We’re better together: A bright, driven person like you and an industry‑leading powerhouse like BAL? It’s a perfect combination! We truly want to see you succeed here and become an integral part of our mission to provide an experience that makes a positive difference in people’s lives. Come be a part of something special, where you can have an impact and be valued just for being you!

In addition to competitive pay, a discretionary annual bonus, and a supportive, team oriented culture, we offer an outstanding benefits package that includes medical, dental, vision, disability, and life insurance, sick time, unlimited vacation, and 401(k) with company match.

OVERVIEW:

The Lead of Cybersecurity Operations is a strategic and hands‑on leader responsible for overseeing the day‑to‑day operations of the cybersecurity program. This role drives threat detection, incident response, vulnerability management, and third‑party patching across the enterprise. The ideal candidate will bring deep technical expertise, operational leadership, and a passion for continuous improvement in a hybrid cloud environment.

PRIMARY RESPONSIBILITIES:

• Lead the Cybersecurity Operations team, including SOC analysts, incident responders, and vulnerability management personnel.
• Oversee threat detection and response using tools such as Crowd Strike Falcon Complete, Rapid7 Insight
  
  IDR, and Proofpoint.
• Manage third‑party patching strategy and execution, including tool evaluation (PDQ Connect, Patch My PC, Microsoft EAM).
• Coordinate vulnerability scanning, prioritization, and remediation workflows.
• Develop and maintain operational playbooks and SOPs aligned to ISO 27001, NIST, and CIS standards.
• Collaborate with IT, Dev Ops, and application teams to ensure secure deployments and timely patching.
• Monitor KPIs and metrics to assess operational effectiveness and drive continuous improvement.
• Support compliance audits and risk assessments.
• Mentor team members and foster a culture of accountability and innovation.

QUALIFICATIONS:

• 8+ years in cybersecurity operations, including SOC, incident response, and vulnerability management.
• 3+ years in a leadership or team lead role.
• Experience with enterprise security platforms:
  Crowd Strike, Rapid7, Proofpoint, Code
  42.
• Familiarity with patch management tools and strategies (PDQ, Intune, Patch My PC).
• Strong understanding of ISO 27001, NIST CSF, and CIS benchmarks.
• Experience with cloud environments (AWS preferred) and hybrid infrastructure.
• Preferred certifications: CISSP, GCIA, GCIH, or equivalent.
• Excellent communication, leadership, and analytical skills.

WORKING CONDITIONS:

• Able to sit and work at a computer keyboard for extended periods of time.
• Able to stoop, kneel, bend at the waist and reach on a daily basis.
• Able to perform general office administrative activities: copying, filing, delivering and using the…