IT Security Ops & Strategy Leader

Babcock Power; Marlborough (MA); On-site; USD 125,000 - 165,000; Full time

Job summary

Babcock Power is seeking a Manager of IT Security to lead day-to-day security operations and advance our security program. You will oversee incident response, governance, risk, and vendor management while partnering with IT and business leaders to manage cyber risk in a practical, business-aligned manner.

The role demands strong leadership, clear communication, and the ability to translate technical risk into actionable business priorities.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred; equivalent relevant experience may be considered.
• Substantial progressive experience in information security, including responsibility for security operations, incident response, risk management, and program delivery.
• Demonstrated experience leading or developing security professionals and directing work in a complex, changing environment.
• Working knowledge of governance, risk, and compliance principles and recognized frameworks, including ISO/IEC 27001 and NIST CSF.
• Experience with Microsoft security technologies such as Microsoft Sentinel, Defender XDR, Microsoft Purview, Microsoft Entra, Defender for Cloud, and Defender for Office 365.
• Experience with identity and access management, vulnerability management, network security, cloud security, data protection, email security, and security awareness programs.
• Ability to lead major incident response efforts and communicate effectively with technical teams, business leaders, vendors, and auditors.

Responsibilities

• Lead and develop the security team — set priorities, delegate, coach, and hold clear accountability for outcomes.
• Shape team direction, staffing, and operating standards; build a high-performing, service-oriented culture.
• Balance daily operations with project delivery, audit support, and long-term initiatives.
• Own the security operations model: queue health, escalation, service levels, key performance indicators, and continuous improvement.
• Direct response to major incidents, coordinate stakeholders and executive communications, and maintain plans, playbooks, tabletop exercises, and post-incident reviews.
• Oversee threat detection (Microsoft Sentinel, Defender XDR) and the full vulnerability management lifecycle, from risk-based prioritization through remediation and reporting.
• Evaluate, pilot, and operationalize security capabilities with infrastructure, application, cloud, and business teams.
• Provide oversight for identity and access (Conditional Access, MFA, privileged access), network and cloud security, email security, and endpoint protection.
• Guide security engineering and automation (PowerShell, Microsoft Graph API, KQL, SOAR) and ensure new capabilities transition cleanly to ongoing support.
• Lead Microsoft Purview maturity — classification, sensitivity labels, data loss prevention, retention, records management, and insider risk.
• Lead risk and control assessments, audits, policy and exception management, and the risk register, aligned to ISO/IEC 27001 and the NIST CSF.
• Own the security awareness program and support governance of AI usage, including acceptable-use and risk requirements.
• Translate threats, incidents, and program risk into clear business language for leadership, stakeholders, and auditors.
• Lead concurrent security projects, managing scope, dependencies, budget, resources, and delivery risk.
• Manage key security vendors and deliver concise reporting on operations, risk, compliance, and program maturity.

Skills

Leadership

Communication

Stakeholder management

Incident response

Risk management

Decision making

Team development

Strategic thinking

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Tools

Microsoft Sentinel

Defender XDR

Microsoft Purview

Microsoft Entra

Defender for Cloud

Job description

Babcock Power is seeking a Manager of IT Security to lead day-to-day security operations and advance our security program. You will oversee incident response, governance, risk, and vendor management while partnering with IT and business leaders to manage cyber risk in a practical, business-aligned manner.

The role demands strong leadership, clear communication, and the ability to translate technical risk into actionable business priorities.