5+ years of experience in IT, information security, or cybersecurity.
Bachelor's degree in computer science, IT, business administration, or related field preferred.
Experience with Grid/OT technologies and NERC CIP compliance/audits.
Proven ability to develop cybersecurity strategies, policies, and metrics.
Familiarity with the NIST Cybersecurity Framework.
Relevant professional certifications (CISSP, CISM, CISA, CRISC, GIAC) are a plus.
Strong communication and collaboration skills.
Responsibilities
Own the Grid/OT cybersecurity governance strategy and metrics.
Translate NERC CIP obligations into actionable control requirements.
Provide cybersecurity expertise for Grid/OT projects and stakeholder engagements.
Lead governance reviews to track control effectiveness and compliance issues.
Advise leadership on governance decisions and risk management approaches.
Perform security risk assessments and business impact analyses.
Monitor technology risks and manage security incidents.
Benefits
Hybrid work model with flexibility for remote work.
Opportunities for professional development and training.
Supportive work environment focused on sustainability and reducing carbon emissions.
Consideration for applicants with arrest or conviction records under fair chance laws.
Potential for relocation assistance.
Up to 5% travel required within the service territory.
Full Job Description
Become a Cybersecurity Senior Specialist at Southern California Edison (SCE) and build a better tomorrow. In this job, you'll work with the Cybersecurity Governance team to help secure the company.
More specifically, you'll:
Own the multi-year Grid/Operational Technology (OT) cybersecurity governance strategy, including priorities, guiding principles, measurable outcomes, and metrics.
Translating NERC CIP obligations into practical control requirements, evidence expectations, and guidance for SCADA and substation systems.
Provide cybersecurity technical expertise across Grid/OT projects and stakeholder engagements to develop policies, standards, and technical requirements; assess and enforce adherence; identify risks; and determine appropriate cybersecurity risk management approaches.
Lead regular Grid/OT governance reviews to track control effectiveness, audit readiness, and risk reduction, driving compliance issues, exceptions, and remediation plans to closure through clear ownership and escalation.
Advise leaders on Grid/OT governance decisions, including exceptions, risk acceptance, compensating controls, security monitoring, resilience, and regulatory considerations.
As a Cybersecurity Senior Specialist your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?
Responsibilities
Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems.
Carries out project reporting for assigned projects, monitoring project status, timeline and budgets. Assists in the planning and implementation of current and future security domains including those which may introduce new service areas.
Adopts and follows security controls, processes, and procedures to manage risk across all information system environments (infrastructure, network, and applications) with the assistance of the application and infrastructure management teams.
Monitors technology risk, identifies root cause or key themes, recommends for resolution. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate. Reviews and shapes the production of evidence to support internal and external audits.
Implements appropriate security measures for information systems and applications that control access to data, and prevents unauthorized modification, destruction, or disclosure of information.
Develops and maintains metrics, alerts, dashboards, and reports for security monitoring.
Maintains incident response plans and performs incident response activities as directed and in accordance with established procedures and guidelines and those of federal authorities.
A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.
Minimum Qualifications
Five or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.
Preferred Qualifications
Bachelor's degree or higher in computer science, information technology, business administration, or a related field.
Experience in Grid/OT technologies, environments, and operations, with experience in NERC CIP regulatory compliance and/or audits.
Experience developing cybersecurity strategy, policies, processes, and metrics; developing, implementing, technically enforcing, and monitoring security controls.
Knowledge of or experience working within the NIST Cybersecurity Framework.
Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC), Global Information Assurance Certification (GIAC), and/or other relevant certifications.
Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
Strong analytical and problem-solving abilities, with keen attention to detail.
Additional Information
This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days. Unless otherwise noted, employees are required to work and reside in the state of California. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!
Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
The primary work location for this position is Rosemead, CA. However, the successful candidate may also be asked to work for an extended amount of time at various locations througout the SCE service territory.
Position will require up to 5% traveling and being out in the field throughout the SCE service territory.
This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
