Security & Compliance Senior Specialist

Join the Clean Energy Revolution

Become a Security & Compliance Senior Specialist at Southern California Edison (SCE) and build a better tomorrow. The IS – S&C Senior Specialist for NERC CIP Compliance plays a key role in supporting and executing business requirements, conducting gap analyses, and contributing to the development of effective control strategies and risk mitigation plans.

Additionally, You’ll Be Involved In

• Identifying and evaluating emerging regulatory challenges and commercial opportunities within both current and evolving compliance environments.
• Providing subject matter expertise on new product structures and ensuring alignment with changing regulatory requirements and organizational policies.
• Fulfilling complex NERC CIP and Grid compliance obligations, including security reporting and audit readiness, while collaborating across departments to promote consistent compliance practices.
• Working closely with the Program Manager, the Senior Specialist helps maintain operational efficiency and ensures day-to-day adherence to NERC CIP standards.
• Collaborating with cross‑functional teams such as Transmission & Distribution, Corporate Security, Generation, Energy Procurement, and Ethics & Compliance to support program deliverables and stakeholder communications.
• Operating with a high degree of independence, the Senior Specialist also contributes to collaborative initiatives across the Grid Services and IT departments.

As a Security & Compliance Senior Specialist
, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

• Analyzes existing security systems and makes recommendations for changes or improvements. Prepares reports and action plans in the event of a security breach.
• Ensures regular penetration testing is completed and any findings are remediated in a timely manner. Assists security team by completing tasks of low to medium complexity for projects of various sizes and scope as assigned by information security leadership.
• Creates, revises, and maintains high quality written process documents, methods of procedure, knowledge base articles, flowcharts.
• Monitors day-to-day security logs and traffic and analyzes for network attacks or intrusions.
• Participates in rollouts of threat and vulnerability management solutions across various business entities; assists program leaders with documentation, testing, and validation of deployed scanning solutions.
• Identifies and manages risk to ensure that risks are mitigated, and problems resolved, in relation to meeting relevant commitments.
• Reviews policies and procedures for compliance with applicable standards and to identify areas of improvement for finding remediation.
• Maintains cybersecurity procedures and processes as assigned.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Five or more years of experience in information technology, information security and/or cybersecurity.

• Bachelor’s Degree in Engineering, Business, Information Technology, in a related field, or JD.
• Two years of experience working with industry-standard frameworks such as NIST, ITIL, COBIT, CSF, and ISO 27001, supporting cybersecurity, IT governance, or compliance initiatives.
• Experience in regulatory compliance within the utility sector, including exposure to NERC or FERC standards and audit processes.
• Two years of experience managing and supporting diverse IT infrastructure and operating systems, with proficiency in basic scripting (e.g., Power Shell, Bash).
• Advanced Excel skills for automation, reporting, and data analysis.
• Strong written communication skills including the ability to develop effective presentations and management briefings.
• CISA/Security+/CISSP or any compliance or security…