安全与合规高级专家

Job Description

Become a Security & Compliance Senior Specialist at Southern California Edison (SCE) and build a better tomorrow. The IS - S&C Senior Specialist for NERC CIP Compliance plays a key role in supporting and executing business requirements, conducting gap analyses, and contributing to the development of effective control strategies and risk mitigation plans.

Additionally, you'll be involved in:

• Identifying and evaluating emerging regulatory challenges and commercial opportunities within both current and evolving compliance environments.
• Providing subject matter expertise on new product structures and ensures alignment with changing regulatory requirements and organizational policies.
• Fulfilling complex NERC CIP and Grid compliance obligations, including security reporting and audit readiness, while collaborating across departments to promote consistent compliance practices.
• Working closely with the Program Manager, the Senior Specialist helps maintain operational efficiency and ensures day-to-day adherence to NERC CIP standards.
• Collaborating with cross-functional teams such as Transmission & Distribution, Corporate Security, Generation, Energy Procurement, and Ethics & Compliance to support program deliverables and stakeholder communications.
• Operating with a high degree of independence, the Senior Specialist also contributes to collaborative initiatives across the Grid Services and IT departments.

As a Security & Compliance Senior Specialist, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

Responsibilities

• Analyzes existing security systems and makes recommendations for changes or improvements. Prepares reports and action plans in the event of a security breach.
• Ensures regular penetration testing is completed and any findings are remediated in a timely manner. Assists security team by completing tasks of low to medium complexity for projects of various sizes and scope as assigned by information security leadership.
• Creates, revises, and maintains high quality written process documents, methods of procedure, knowledge base articles, flowcharts.
• Monitors day-to-day security logs and traffic and analyzes for network attacks or intrusions.
• Participates in rollouts of threat and vulnerability management solutions across various business entities; assists program leaders with documentation, testing, and validation of deployed scanning solutions.
• Identifies and manages risk to ensure that risks are mitigated, and problems resolved, in relation to meeting relevant commitments.
• Reviews policies and procedures for compliance with applicable standards and to identify areas of improvement for finding remediation.
• Maintains cybersecurity procedures and processes as assigned.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

Minimum Qualifications

• Five or more years of experience in information technology, information security and/or cybersecurity.

Preferred Qualifications

• Bachelor's Degree in Engineering, Business, Information Technology, in a related field, or JD.
• Two years of experience working with industry-standard frameworks such as NIST, ITIL, COBIT, CSF, and ISO 27001, supporting cybersecurity, IT governance, or compliance initiatives.
• Experience in regulatory compliance within the utility sector, including exposure to NERC or FERC standards and audit processes.
• Two years of experience managing and supporting diverse IT infrastructure and operating systems, with proficiency in basic scripting (e.g., PowerShell, Bash).
• Advanced Excel skills for automation, reporting, and data analysis.
• Strong written communication skills including the ability to develop effective presentations and management briefings.
• CISA/Security+/CISSP or any compliance or security certification.

Additional Information

• This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days.??? Unless otherwise noted, employees are required to work and reside in the state of California.??? Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
• Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!
• Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
• The primary work location for this position is Alhambra, CA. However, the successful candidate may also be asked to work at alternative SCE facilities.
• Position will require up to 10% traveling and being out in the field throughout the SCE service territory.
• This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
• This position has an option for a 9/80 Alternate Work Schedule or 40hrs/5 days a week.
• Relocation does not apply to this position.