Cybersecurity Operations Center; CSOC Manager

Become a Cybersecurity Operations Center (CSOC) Manager at Southern California Edison (SCE) And Build a Better Tomorrow. In This Job, You Will

• Lead, manage, and develop a team of Tier 1 and Tier 2 cybersecurity analysts responsible for security monitoring, alert triage, investigation, and incident response activities.
• Provide day-to-day operational oversight of security monitoring and incident response functions to ensure timely identification, investigation, containment, and escalation of cybersecurity events and incidents
• Establish team priorities, workloads, schedules, and escalation processes to ensure effective coverage and operational readiness.
• Drive continuous improvement of triage workflows, standard operating procedures, playbooks, and analyst documentation.
• Monitor analyst performance, provide coaching and mentoring, conduct performance evaluations, and support career development initiatives.
• Lead major incident coordination efforts and ensure adherence to established escalation procedures, communication protocols, and incident management processes.
• Ensure the collection, tracking, and reporting of operational metrics, including alert volumes, response times, incident trends, detection effectiveness, and analyst productivity.
• Prepare and deliver operational updates, executive briefings, dashboards, and presentations to cybersecurity leadership and business stakeholders.
• Foster a culture of operational excellence, accountability, continuous learning, and collaboration across the CSOC and broader cybersecurity organization.
• Serve as a Cybersecurity Incident Response Team (CSIRT) Lead during incident response operations.

As a Cybersecurity Manager
, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

• Manages security-related projects, including the implementation of security technologies as well as manage vendors to ensure managed services meet or exceed the enterprise's needs.
• Maintains efforts to identify, investigate, detect, respond, resolve, recover, and report cyber security incidents in accordance with SCE's incident response plan.
• Oversees and provides guidance to daily incident response activities and develops strategies to contain and eradicate the incidents.
• Articulates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels.
• Creates and articulates materials on how to embed and measure security in the software development lifecycle.
• Implements and enforces global information security policies and standards across business lines. Maintains cybersecurity risk register that will be used to prioritize and communicate enterprise cybersecurity risk response and monitoring to management.
• Develops and maintains a document framework of continuously up-to-date information security policies, standards, and guidelines.
• Ensures alignment with product management and R&D project leaders to ensure security lifecycle planned within product development roadmaps.
• Manages security activities and requirements in the system development life cycle (SDLC) and application development efforts.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Five or more years of combined experience performing or supervising cybersecurity, information security and/or information technology.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business Administration, Project Management, or a related field.
• Experience leading or supervising Tier 1 and Tier 2 Security Operations Center (SOC/CSOC) teams.
• Experience in cyber incident detection, triage, investigation, containment, and response processes.
• Experience developing and maturing cybersecurity operations processes,…