As for the work? If the environment is set up by good architects and then implemented by engineers, and their using industry framework/govt regulation to the point it doesn't make problematic lots of support.
A good security environment set up is judged by their support load, if it's high, then it's bad set up or not designed well enough by architects to allow ppl to carry out their work with as least risk. It's a game of balancing how much risk u will allow on their environment and the client business needs. Once u understand balance, it's pretty str8 forward. Haven't seen superb environments to be honest.
Work-Life balance depends on industry. If ur in govt space u adopt their culture which is very toxic and lots of bullying, if in banking sector they their own culture and is fast speed and profiteering involved. That's enterprise scale. If u go to community sector their more laid back but lower pay i heard but better 4 health. Then u have small-medium sized companies and their usually for new grads to develop experience before they move to enterprise scale tech.
Banking sector pays most
Govt next
Community sector or govt funded place
Small-to medium companies deal with residential, schools, private business IT need.