Cybersecurity Senior Specialist

Join the Clean Energy Revolution

Becomea
Cybersecurity Senior Specialist at Southern California Edison (SCE) and build a better tomorrow. In this job, you’ll work with the Cybersecurity Governance team to help secure the company.

More specifically, you’ll:

• Own the multi-year Grid/Operational Technology (OT) cybersecurity governance strategy, including priorities, guiding principles, measurable outcomes, and metrics.
• Translating NERC CIP obligations into practical control requirements, evidence expectations, and guidance for SCADA and substation systems.
• Provide cybersecurity technical expertise across Grid/OT projects and stakeholder engagements to develop policies, standards, and technical requirements; assess and enforce adherence; identify risks; and determine appropriate cybersecurity risk management approaches.
• Lead regular Grid/OT governance reviews to track control effectiveness, audit readiness, and risk reduction, driving compliance issues, exceptions, and remediation plans to closure through clear ownership and escalation.
• Advise leaders on Grid/OT governance decisions, including exceptions, risk acceptance, compensating controls, security monitoring, resilience, and regulatory considerations.

As a
Cybersecurity Senior Specialist your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

• Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems.
• Carries out project reporting for assigned projects, monitoring project status, timeline and budgets. Assists in the planning and implementation of current and future security domains including those which may introduce new service areas.
• Adopts and follows security controls, processes, and procedures to manage risk across all information system environments (infrastructure, network, and applications) with the assistance of the application and infrastructure management teams.
• Monitors technology risk, identifies root cause or key themes, recommends for resolution. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate. Reviews and shapes the production of evidence to support internal and external audits.
• Implements appropriate security measures for information systems and applications that control access to data, and prevents unauthorized modification, destruction, or disclosure of information.
• Develops and maintains metrics, alerts, dashboards, and reports for security monitoring.
• Maintains incident response plans and performs incident response activities as directed and in accordance with established procedures and guidelines and those of federal authorities.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Five or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.

Preferred Qualifications

• Bachelor’s degree or higher in computer science, information technology, business administration, or a related field.
• Experience in Grid/OT technologies, environments, and operations, with experience in NERC CIP regulatory compliance and/or audits.
• Experience developing cybersecurity strategy, policies, processes, and metrics; developing, implementing, technically enforcing, and monitoring security controls.
• Knowledge of or experience working…