Cybersecurity Senior Specialist

Thomson Reuters Markets Espana SL.; Rosemead (CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Southern California Edison (SCE) is seeking a Cybersecurity Senior Specialist to own the Grid/OT governance strategy and translate NERC CIP obligations into practical controls.

You will lead governance reviews, advise on risk, and develop policies and metrics across Grid/OT projects; the role is hybrid in California.

Join us to help secure critical infrastructure and support clean energy goals.

Qualifications

• Five or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.
• Bachelor’s degree or higher in computer science, information technology, business administration, or a related field.
• Experience in Grid/OT technologies, environments, and operations, with experience in NERC CIP regulatory compliance and/or audits.
• Experience developing cybersecurity strategy, policies, processes, and metrics; developing, implementing, technically enforcing, and monitoring security controls.
• Knowledge of or experience working within the NIST Cybersecurity Framework.
• Professional certifications such as CISSP, CISM, CISA, CRISC, GIAC, and/or other relevant certifications.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Strong analytical and problem-solving abilities, with keen attention to detail.

Responsibilities

• Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems.
• Monitors project status, timeline and budgets; assists in planning and implementation of current and future security domains.
• Adopts and follows security controls, processes, and procedures to manage risk across all information system environments.
• Monitors technology risk, identifies root cause, investigates incidents and supports audits.
• Implements appropriate security measures for information systems and applications that control access to data.
• Develops and maintains metrics, alerts, dashboards, and reports for security monitoring.
• Maintains incident response plans and performs incident response activities per procedures.
• Protects private customer data and proprietary information with highest standards of conduct and integrity.

Skills

Security risk assessment

Vulnerability assessment

Stakeholder engagement

Policy development

Regulatory compliance

NIST CSF knowledge

Education

Bachelor’s degree or higher in computer science, information technology, or related field

Job description

BecomeaCybersecurity Senior Specialist at Southern California Edison (SCE) and build a better tomorrow. In this job, you’ll work with the Cybersecurity Governance team to help secure the company.

More specifically, you’ll:

• Own the multi-year Grid/Operational Technology (OT) cybersecurity governance strategy, including priorities, guiding principles, measurable outcomes, and metrics.
• Translating NERC CIP obligations into practical control requirements, evidence expectations, and guidance for SCADA and substation systems.
• Provide cybersecurity technical expertise across Grid/OT projects and stakeholder engagements to develop policies, standards, and technical requirements; assess and enforce adherence; identify risks; and determine appropriate cybersecurity risk management approaches.
• Lead regular Grid/OT governance reviews to track control effectiveness, audit readiness, and risk reduction, driving compliance issues, exceptions, and remediation plans to closure through clear ownership and escalation.
• Advise leaders on Grid/OT governance decisions, including exceptions, risk acceptance, compensating controls, security monitoring, resilience, and regulatory considerations.

As aCybersecurity Senior Specialist your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

Responsibilities

• Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems.
• Carries out project reporting for assigned projects, monitoring project status, timeline and budgets. Assists in the planning and implementation of current and future security domains including those which may introduce new service areas.
• Adopts and follows security controls, processes, and procedures to manage risk across all information system environments (infrastructure, network, and applications) with the assistance of the application and infrastructure management teams.
• Monitors technology risk, identifies root cause or key themes, recommends for resolution. Investigates suspected attacks and manages security incidents. Uses forensics where appropriate. Reviews and shapes the production of evidence to support internal and external audits.
• Implements appropriate security measures for information systems and applications that control access to data, and prevents unauthorized modification, destruction, or disclosure of information.
• Develops and maintains metrics, alerts, dashboards, and reports for security monitoring.
• Maintains incident response plans and performs incident response activities as directed and in accordance with established procedures and guidelines and those of federal authorities.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

Minimum Qualifications

• Five or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.

Preferred Qualifications

• Bachelor’s degree or higher in computer science, information technology, business administration, or a related field.
• Experience in Grid/OT technologies, environments, and operations, with experience in NERC CIP regulatory compliance and/or audits.
• Experience developing cybersecurity strategy, policies, processes, and metrics; developing, implementing, technically enforcing, and monitoring security controls.
• Knowledge of or experience working within the NIST Cybersecurity Framework.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC), Global Information Assurance Certification (GIAC), and/or other relevant certifications.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Strong analytical and problem-solving abilities, with keen attention to detail.

Additional Information

• This position’s work mode ishybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days. Unless otherwise noted, employees are required to work and reside in the state of California. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
• Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!
• Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
• The primary work location for this position is Rosemead, CA. However, the successful candidate may also be asked to work for an extended amount of time at various locations throughout the SCE service territory.
• Position will require up to5% traveling and being out in the field throughout the SCE service territory.
• This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
• Relocation may apply to this position.

About Southern California Edison

The people at SCE don't just keep the lights on. Our mission is so much bigger. We’re fueling the kind of innovation that’s changing an entire industry, and quite possibly the planet. Join us and create a future with cleaner energy, while providing our customers with the safety and reliability they demand. At SCE, you’ll have a chance to grow personally and professionally, making a real impact in Southern California and around the world.

Southern California Edison is a proud Equal Opportunity Employer, including disability and protected veteran status.

We are committed to ensuring that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodations at [e-mail] or [phone] and select option 2.