Embedded GSOC Intelligence Team Leader

Expected Compensation: C$100,000 – C$125,000 per year

Location: Onsite, Toronto, ON

PTO: 20 days per annum

Sick: 5 paid days per annum

Vacancy Status: Existing Vacancy

This role will close for applications at 0900 EDT on Monday 14 September 2026.

Position Summary

We are looking for an experienced security and intelligence professional to join us as an embedded GSOC Intelligence Team Leader for a newly established Global Security Operations Centre (GSOC) at a multinational e-commerce client. The GSOC Manager will lead a 24/7/365 team of GSOC Intelligence Analysts providing threat monitoring, incident response, intelligence analysis, and physical security operations.

You will be responsible for leading, managing, and developing the GSOC team. This will include line management, scheduling, identifying training needs and delivering training, and performance management. The Team Leader will also be responsible for setting the standard for high-quality intelligence analysis work and as a power user for all tools and systems used by the GSOC. This role will also involve working closely with Sibylline management and the client to ensure a smooth transition as the new team comes online. You will proactively engage with the client and stakeholders on monitoring and intelligence needs and priorities, and help to scope the output and strategic deliverables of the team.

This is an onsite role at the client’s Toronto office, working Monday to Friday, 9am-5pm. There may be occasional need to work out-of-hours during emergencies and time sensitive matters.

Essential Functions / Responsibilities

• Drive the implementation of the new GSOC team, identifying the client’s immediate delivery needs and any team training requirements

• Set team priorities, delegate tasks, manage deadlines, provide feedback, and ensure high-quality service delivery

• Manage the 24/7/365 shift schedule and ensure full shift coverage

• Monitor and direct the team’s use of security systems, intelligence and open-source tools

• Lead oversight of GSOC’s adherence to incident response, triage, and escalation Standard Operating Procedures (SOPs)

• Provide continuous editorial and mentoring support for the GSOC team

• Define and agree on key intelligence priorities with security stakeholders to optimise the production and delivery of intelligence products and briefings

• Build and maintain cross-functional stakeholder relationships

• Identify process gaps, training gaps, configuration issues, or workflow friction, and implement corrective actions in a timely manner

• Display creating thinking and consulting skills to deliver a continually improving service for the client

• Other duties as assigned

Knowledge, Skills, and Abilities

• Experience, knowledge, and interest in current affairs, international relations and emerging security threats

• Advanced research, intelligence gathering and analytical skills, and the ability to write high-quality products and deliver high-impact briefings for a senior security audience

• Excellent English written and verbal communication skills, with a high attention to detail and strong ability to quality assure (peer review) intelligence products

• Excellent time management and prioritisation skills, with the ability to set and meet deadlines and manage own / team’s workload accordingly

• Ability to solve complex problems with patience and precision, whilst retaining focus on customer needs

• Ability to build rapport, strong and sustainable relationships, and interact within all levels of the client

• Ability to develop and deliver training and support direct reports’ professional development

• Undergraduate or Postgraduate qualifications in International Security, Intelligence, Risk, Geopolitics or other related disciplines, or equivalent professional experience

• Experience with GSOC and intelligence tools, including threat monitoring, OSINT, and SOCMINT platforms

• At least 5+ years total experience working in a corporate setting or similar public or private sector environments, with at least 2+ year line management experience

• Fluent written and spoken English

• Preferred cross-functional experience within a global security team (e.g. threat monitoring, travel security, business continuity, crisis management), particularly in a leadership role

Work Environment/Physical Requirements

This position is moderately self-directed and requires understanding and compliance with company policies, procedures, and values. While performing the duties of this job, the employee is regularly required to interact collaboratively with the team and stakeholders, and communicate via phone, videophone, or text messaging. The position may require travel up to 5%.

Interview Process

• Initial call with our Talent Acquisition team member
• Timed written assessment (arranged at a time that suits you) to test writing and analytical capability
• Panel interview with some of the team members and hiring managers at Sibylline
• Meet and Greet with the client

Artificial Intelligence: Not used in candidate screening

Research indicates that certain groups are less likely to apply for a position unless they meet every single requirement. If you feel you meet some of the requirements and can offer a unique perspective to this role, we strongly encourage you to apply—you might be the perfect fit we're looking for!

Sibylline is committed to the recruitment and selection of candidates without regard for sexual orientation, gender, ethnicity, age, political beliefs, culture, and lifestyle. We are committed to fostering a business culture that reflects these values and promotes equal opportunity.