Cybersecurity Senior Advisor

Southern California Edison (SCE); Rosemead (CA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Southern California Edison (SCE) is seeking a Cybersecurity Senior Advisor to lead risk assessments and enhance the security posture across enterprise operations. The role is central to managing cybersecurity risks and ensuring compliance with regulatory standards while collaborating with various technical teams.

With a focus on security assessment, incident response, and stakeholder engagement, you will drive initiatives for risk remediation and create security best practices. This hybrid position requires expertise in cybersecurity and a collaborative spirit.

Qualifications

• Ten or more years of experience in IT, information security, and/or cybersecurity.
• US citizenship required.

Responsibilities

• Lead cybersecurity project delivery and ensure success criteria are met.
• Design, implement, and maintain a secure posture across on-premises and cloud environments.
• Collaborate with IT and Quality teams to assess and remediate IT risks.
• Ensure security applications are integrated during implementations and updates.
• Foster relationships with senior leaders to align business priorities with security.

Skills

Information security

Cybersecurity

Risk assessment

Vulnerability discovery

Stakeholder management

Education

Bachelor’s Degree in Engineering, IT, Cybersecurity, or related discipline

Tools

NIST CSF / NIST 800-53

ISO 27001

Job description

Job Overview

Join the Clean Energy Revolution. Become a Cybersecurity Senior Advisor at Southern California Edison (SCE) and build a better tomorrow. In this role, you’ll be part of SCE’s Cybersecurity Exposure Team, leading deep, hands‑on risk assessments across enterprise technology and critical operational environments (IT/OT). You’ll identify priority systems and threat scenarios, validate control effectiveness, and translate findings into practical risk treatment plans with clear owners and measurable outcomes. Exposure Team members collaborate with internal teams and trusted third parties to drive remediation through to closure and ensure risk is continuously managed.

Additionally, You’ll

• Partner with infrastructure teams to perform threat modeling and attack‑path analysis, then recommend concrete platform and network changes (segmentation, identity controls, hardening, logging) that close gaps and reduce exposure.
• Lead deep‑dive cybersecurity assessments with IT and Quality partners: validate controls, perform vulnerability discovery and prioritization, review configuration baselines, and drive risk treatment plans; support investigations and root‑cause analysis for security incidents and policy violations.
• Drive delivery of complex security initiatives from design through rollout, defining success metrics, managing technical risks and dependencies, and coordinating internal teams and vendors to deliver on time.
• Define and maintain secure‑by‑default baselines across on‑prem and cloud environments, implementing hardening standards, access controls, key/secret handling, and automated guardrails to support repeatable secure build and deployment practices.
• Create and maintain hardened system profiles and compliance mappings, tracking posture, drift, and remediation progress across enterprise platforms.
• Establish repeatable assessment, evidence, and exception‑handling methods aligned to information security standards and regulatory requirements, ensuring findings translate into actionable remediation backlogs with clear owners and timelines.

Responsibilities

• Lead cyber security project delivery by ensuring the cyber security team delivers on success criteria, addresses project issues and risks, and builds commitment with delivery team and internal or external partners.
• Design, implement and maintain a secure posture and baseline across all components of the organization on‑premises and cloud IT environments, employing recognized security engineering practices and supporting secure build processes.
• Develop, maintain, and deliver secure system profiles, and maintain an overall view of compliance.
• Collaborate with the IT and Quality teams to assess, remediate, and prevent information technology risks. Drive system auditing, vulnerability risk assessments, assured file transfers, hardware and software configuration management, data integrity containment, and investigations on internal affairs related security violations and incidents.
• Ensure that new and existing security applications and systems are successfully integrated during implementations, updates, and patching to maintain or increase our ability to detect and prevent security exploits.
• Collaborate with external managed security solution provider and analysts to enhance security solutions to reduce malicious and suspicious activity based on security data analysis, review of the current threat landscape, and assessment of security tickets.
• Work with the infrastructure team and security architect to analyze security threats and recommend technical infrastructure and architecture changes to address gaps and reduce risk.
• Shape procedures and methods for auditing and addressing risk and non‑compliance to information security standards.
• Foster strong relationships with senior leaders and stakeholders to understand and map out business priorities and how security engagement can be effectively managed to deliver secure design solutions.
• Secure protection of all physical, financial and cybersecurity assets, and properly access and manage private customer data, proprietary information, confidential medical records, and other highly sensitive information and data with the highest standards of conduct and integrity.

Minimum Qualifications

• Ten or more years of experience in information technology, information security and/or cybersecurity.
• US citizenship required.

Preferred Qualifications

• Bachelor’s Degree in Engineering, Information Technology, Cybersecurity, Environmental or Physical Sciences, Business or related discipline.
• Familiarity with security frameworks (e.g., NIST CSF / NIST 800‑53, ISO 27001) and translating requirements into implementable controls and evidence.
• Hands‑on security assessment experience across enterprise environments (on‑prem + cloud) including control validation, configuration review, penetration testing, code review, and/or vulnerability triage.
• CISSP, GSEC, GICSP, or other related security certifications.
• Strong OS and network fundamentals (Windows/Linux internals, TCP/IP, DNS, PKI/TLS) applied to troubleshooting and security analysis.
• Operational Technology exposure (industrial networks, Purdue model concepts, segmentation, asset inventory constraints) or clear willingness to learn OT.

Work Mode and Additional Requirements

• This position’s work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days.
• Employees are required to work and reside in the state of California unless otherwise noted.
• Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
• The primary work location is Rosemead, CA.
• Position requires up to 10% traveling and field work throughout the SCE service territory.
• This position is NERC/CIP impacted – prior to hiring the candidate must pass a Personnel Risk Assessment (PRA) or background investigation. After hiring, the candidate must complete specified training before gaining un‑escorted access to assigned work location and performing duties.
• Relocation may apply to this position.

Equal Opportunity

Southern California Edison is a proud Equal Opportunity Employer, including disability and protected veteran status. We are committed to ensuring that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodations at [e-mail] or (626) 302‑3456 and select option 2.