Threat Intel Analyst

At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress.

Further your career at Ball, a world leader in manufacturing sustainable aluminium packaging. Achieve extraordinary things when you join our team, and make a difference in your professional development, the community, and around the globe!

Create a new future. Apply Today.

Position Overview
The Senior Manager of OT Security is responsible for leading the cybersecurity protection of Ball Corporation’s operational technology (OT) environments, including manufacturing plants, industrial control systems, and plant networks, in a manner that prioritizes safety, production uptime, and operational reliability.

This role operates at the intersection of manufacturing operations and enterprise cybersecurity, ensuring OT cyber risks are identified, mitigated, and managed in alignment with enterprise governance, architectural standards, and cyber defense capabilities. Senior Manager works closely with Cybersecurity Governance, Risk, and Compliance (GRC), Cybersecurity Architecture & Engineering, and Cyber Defense Operations to ensure OT security is risk‑informed, architecturally sound, and operationally defendable.

Key Responsibilities Include

• Lead the OT cybersecurity program aligned to enterprise cybersecurity strategy, governance, and risk tolerance
• Partner closely with Cybersecurity Governance, Risk, and Compliance (GRC) to identify, assess, document, and track OT cyber risks, including risk acceptance and exception management
• Collaborate with Cybersecurity Architecture & Engineering to define and implement OT security architectures, standards, and segmentation models that are secure‑by‑design and operationally viable
• Work with Cyber Defense Operations to ensure OT environments are appropriately monitored, integrated into incident response processes, and supported during cyber events
• Oversee OT security risk assessments, attack surface management, control implementation, and remediation planning in manufacturing environments
• Establish OT security standards, baselines, and implementation guidance consistent with enterprise policies
• Coordinate OT cybersecurity incident preparedness, tabletop exercises, and lessons learned
• Lead and develop OT security specialists and regional OT security resources
• Partner with regional manufacturing, engineering, and plant leadership to implement OT security controls appropriate to local operational realities
• Support regions in aligning OT environments with enterprise security standards while accounting for regulatory, safety, and production constraints
• Facilitate communication between regional OT teams and corporate cybersecurity functions to ensure visibility of OT cyber risks and incidents
• Promote consistent OT security posture across global sites while managing approved regional deviations through formal governance processes

What are we looking for?

• Bachelor’s degree in Engineering, Information Security, Computer Science, or a related discipline required
• Minimum of 10-12 years of experience in operational technology, industrial systems, cybersecurity, or related fields
• Demonstrated experience supporting manufacturing or industrial environments with strong safety and uptime requirements
• Relevant OT or cybersecurity certifications preferred
• Strong collaboration and influencing skills across manufacturing, engineering, and cybersecurity teams
• Ability to balance cybersecurity risk reduction with safety, reliability, and production uptime
• Practical problem‑solving skills in complex, constrained operational environments
• Leadership and team‑development capabilities
• Clear communication skills for both technical and non‑technical stakeholders
• Ability to operate effectively within governance, architectural, and operational security models
• Fluent English language

Ball Corporation is an Equal Opportunity Employer. We actively encourage applications from everybody, regardless of gender, age, ethnicity, faith, ability, or orientation. Our products range from infinitely recyclable aluminium cans, cups to aerosol bottles solutions that enable our customers to contribute to a better world.

Each of us has a deep commitment to diversity and inclusion which is the foundation of our culture of belonging. Everyone at Ball is making a difference by doing what we love. Because what we create may change, but what we will always make is a difference.

Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems.

No agencies please.

About us

Insightful is a market-leading platform for workforce analytics. We process really big data, synthesize it into actionable insights, and ultimately provide an easy-to-use product that empowers enterprise customers to improve employee productivity, business processes, and overall staff well-being.

Job Description

We are looking for an Information Security Manager to join Insightful. In this role, you will act as the primary point of contact for all InfoSec matters across the organization, ensuring our security posture remains strong, compliant, and aligned with our business goals.

Key Responsibilities:

• Security Leadership & Compliance:
  Act as the main point of contact for all Information Security topics across the organization. Implement, maintain and own InfoSec controls compliance and lead/oversee audit processes for SOC 2 Type II and ISO 27001 certification.
• Cross-Functional Collaboration:
  Partner with Development, DevOps, IT, and Product teams as a subject matter expert. Ensure solution architectures align with InfoSec best practices and actively mitigate identified security risks.
• Legal Collaboration:
  Work closely with Legal on compliance with emerging InfoSec laws and identify security-related redlines in customer contracts.
• Customer Enablement:
  Partner with our
  Sales, Customer Success, and Support
  teams to address prospective or active customer inquiries, security assessment questionnaires, and audit requests.
• Incident Response:
  Assist and guide the Incident Response team in handling, investigating, and resolving any potential security events of interest.
• Security Architecture & Monitoring:
  Propose and drive continuous improvements to current security architecture and monitoring mechanisms to safeguard Insightful’s business-critical assets.
• Risk Management:
  Support the management team with strategic expertise in information security risk management.
• Security Awareness:
  Own and drive information security awareness training activities for both new and existing employees.

You are a great fit for this role if you have:

• 5+ years
  of proven experience as an Information / IT Security expert.
• A track record of leading
  at least one successful SOC 2 Type II, ISO 27001, or similar security audit
  (driving the process from initial implementation, through the audit to the official report/certificate).
• Solid knowledge of security architecture principles.
• Familiarity with modern cloud technologies (such as GCP, AWS, Azure).
• Ability to translate complex security and privacy concepts into clear, actionable business terms.
• Excellent communication skills, with fluent verbal and written English language skills.

Bonus points if you have:

• Experience with AI security concepts, risk frameworks, and safe AI deployment practices.
• Relevant information security certifications

Zadaci

• Further development and operation of our SIEM solution, including the configuration, monitoring and optimization of dashboards, searches, alerts, use cases and reports
• Analyze substantial amounts of security data to identify potential security incidents, reduce their impact and provide recommendations to prevent future security breaches
• Carry out risk assessments and evaluate the information security of new products (hardware, software and services) as part of requirements and procurement processes
• Contribute to security audits and prepare audit reports and technical documentation
• Actively participate in the implementation of current IT security measures within the STRABAG Group

Vaše kvalifikacije

• Completed degree in Computer Science, Information Technology, Business Informatics or a comparable field, or an equivalent qualification
• At least 3 years of hands-on experience in a Security Operations Center (SOC), focusing on SIEM, security monitoring, incident detection and response
• Ability to understand network traffic and detect,monitor, and investigate potential security threats across network, remote, and cloud systems
• Experience with common security tools such as Microsoft Defender and SPLUNK
• Strong understanding of network traffic and common cyber threats such as malware, phishing and DDoS attacks, including the ability to detect and investigate potential security incidents
• Strong analytical and communication skills, with the ability to work independently and as part of an international team; good command of English and German

Additional Experience In The Following Areas Is An Advantage

• Vulnerability assessments, penetration testing or ethical hacking
• Digital forensics, malware analysis or reverse engineering
• Implementation of IT security solutions in a project environment

Zadaci

• Further development and operation of our SIEM solution, including the configuration, monitoring and optimization of dashboards, searches, alerts, use cases and reports
• Analyze substantial amounts of security data to identify potential security incidents, reduce their impact and provide recommendations to prevent future security breaches
• Carry out risk assessments and evaluate the information security of new products (hardware, software and services) as part of requirements and procurement processes
• Contribute to security audits and prepare audit reports and technical documentation
• Actively participate in the implementation of current IT security measures within the STRABAG Group

Vaše kvalifikacije

• Completed degree in Computer Science, Information Technology, Business Informatics or a comparable field, or an equivalent qualification
• At least 3 years of hands-on experience in a Security Operations Center (SOC), focusing on SIEM, security monitoring, incident detection and response
• Ability to understand network traffic and detect,monitor, and investigate potential security threats across network, remote, and cloud systems
• Experience with common security tools such as Microsoft Defender and SPLUNK
• Strong understanding of network traffic and common cyber threats such as malware, phishing and DDoS attacks, including the ability to detect and investigate potential security incidents
• Strong analytical and communication skills, with the ability to work independently and as part of an international team; good command of English and German

Additional Experience In The Following Areas Is An Advantage

• Vulnerability assessments, penetration testing or ethical hacking
• Digital forensics, malware analysis or reverse engineering
• Implementation of IT security solutions in a project environment