Inactive

Edison International

Public utility holding company; electricity.

Cybersecurity Senior Advisor

Security Governance, Risk & CompliancePosted on Nov 4

Full-timeNo salary listed

About the Job

Requirements

Ten or more years of experience in information technology, information security, and/or cybersecurity.
U.S. citizenship is required.
Preferred: Familiarity with security frameworks such as NIST CSF, NIST 800-53, and ISO 27001, and translating requirements into implementable controls and evidence.
Preferred: Hands-on security assessment experience across enterprise on-premises and cloud environments, including control validation, configuration review, penetration testing, code review, and/or vulnerability triage.
Preferred: CISSP, GSEC, GICSP, or other related security certifications.
Preferred: Strong operating-system and network fundamentals, including Windows/Linux internals, TCP/IP, DNS, and PKI/TLS, applied to troubleshooting and security analysis.
Preferred: Operational Technology exposure, including industrial networks, Purdue model concepts, segmentation, and asset inventory constraints, or clear willingness to learn Operational Technology.

Responsibilities

Lead deep, hands-on risk assessments across enterprise technology and critical operational environments, identify priority systems and threat scenarios, validate control effectiveness, and translate findings into practical risk treatment plans with clear owners and measurable outcomes.
Collaborate with internal teams and trusted third parties to drive remediation through closure and ensure risk is continuously managed.
Partner with infrastructure teams to perform threat modeling and attack-path analysis, and recommend platform and network changes such as segmentation, identity controls, hardening, and logging to close gaps and reduce exposure.
Lead cybersecurity assessments with Information Technology and Quality partners by validating controls, discovering and prioritizing vulnerabilities, reviewing configuration baselines, driving risk treatment plans, and supporting investigations and root-cause analysis for security incidents and policy violations.
Drive complex security initiatives from design through rollout by defining success metrics, managing technical risks and dependencies, and coordinating internal teams and vendors to deliver on time.
Define and maintain secure-by-default baselines across on-premises and cloud environments, implementing hardening standards, access controls, key and secret handling, and automated guardrails for repeatable secure build and deployment practices.
Create and maintain hardened system profiles and compliance mappings, tracking posture, drift, and remediation progress across enterprise platforms.
Establish repeatable assessment, evidence, and exception-handling methods aligned to information security standards and regulatory requirements, translating findings into actionable remediation backlogs with clear owners and timelines.
Lead cybersecurity project delivery by ensuring the team meets success criteria, addresses project issues and risks, and builds commitment with delivery teams and internal or external partners.
Design, implement, and maintain a secure posture and baseline across on-premises and cloud Information Technology environments using recognized security engineering practices and supporting secure build processes.
Develop, maintain, and deliver secure system profiles and maintain an overall view of compliance.
Collaborate with Information Technology and Quality teams to assess, remediate, and prevent information technology risks; drive system auditing, vulnerability risk assessments, assured file transfers, hardware and software configuration management, data integrity containments, and investigations of internal-affairs-related security violations and incidents.
Ensure new and existing security applications and systems are successfully integrated during implementations, updates, and patching to maintain or increase the ability to detect and prevent security exploits.
Collaborate with external managed security solution providers and analysts to enhance security solutions and reduce malicious and suspicious activity based on security data analysis, review of the current threat landscape, and assessment of security tickets.
Work with the infrastructure team and security architect to analyze security threats and recommend technical infrastructure and architecture changes to address gaps and reduce risk.
Shape procedures and methods for auditing and addressing risk and non-compliance with information security standards.
Build relationships with senior leaders and stakeholders to understand business priorities and how security engagement can be managed to deliver secure design solutions.
Protect company physical, financial, and cybersecurity assets, and properly access and manage private customer data, proprietary information, confidential medical records, and other sensitive information and data with high standards of conduct and integrity.

Desired Qualifications

Bachelor's degree in Engineering, Information Technology, Cybersecurity, Environmental or Physical Sciences, Business, or a related discipline.

Join the Clean Energy Revolution

Become a Cybersecurity Senior Advisor at Southern California Edison (SCE) and build a better tomorrow. In this role, you’ll be part of SCE’s Cybersecurity Exposure Team, leading deep, hands-on risk assessments across enterprise technology and critical operational environments (IT/OT). You’ll identify priority systems and threat scenarios, validate control effectiveness, and translate findings into practical risk treatment plans with clear owners and measurable outcomes. Exposure Team members collaborate with internal teams and trusted third parties to drive remediation through to closure and ensure risk is continuously managed.

Additionally, you’ll:

Partner with infrastructure teams to perform threat modeling and attack-path analysis, then recommends concrete platform and network changes (segmentation, identity controls, hardening, logging) that close gaps and reduce exposure.
Lead deep-dive cybersecurity assessments with IT and Quality partners: validates controls, performs vulnerability discovery and prioritization, reviews configuration baselines, and drives risk treatment plans; supports investigations and root-cause analysis for security incidents and policy violations.
Drive delivery of complex security initiatives from design through rollout, defining success metrics, managing technical risks and dependencies, and coordinating internal teams and vendors to deliver on time.
Define and maintain secure-by-default baselines across on-prem and cloud environments, implementing hardening standards, access controls, key/secret handling, and automated guardrails to support repeatable secure build and deployment practices.
Create and maintain hardened system profiles and compliance mappings, tracking posture, drift, and remediation progress across enterprise platforms.
Establish repeatable assessment, evidence, and exception-handling methods aligned to information security standards and regulatory requirements, ensuring findings translate into actionable remediation backlogs with clear owners and timelines.

As a Cybersecurity Senior Advisor, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

Responsibilities

Leads cyber security project delivery by ensuring the cyber security team delivers on success criteria, addresses project issues and risks, and builds commitment with delivery team and internal or external partners.
Designs, implements and maintains a secure posture and baseline across all components of the organization on-premises and cloud IT environments, employing recognized security engineering practices and supporting secure build processes.
Develops, maintains, and delivers secure system profiles, and maintains an overall view of compliance.
Collaborates with the IT and Quality teams to assess, remediate, and prevent information technology risks. Drives system auditing, vulnerability risk assessments, assured file transfers, hardware and software configuration management, data integrity containments and investigations on internal affairs related security violations and incidents.
Ensures that new and existing security applications and systems are successfully integrated during implementations, updates, and patching to maintain or increase our ability to detect and prevent security exploits.
Collaborates with external managed security solution provider and analysts to enhance security solutions to reduce malicious and suspicious activity based on security data analysis, review of the current threat landscape, and assessment of security tickets.
Works with the infrastructure team and security architect to analyze security threats and recommend technical infrastructure and architecture changes to address gaps and reduce risk.
Shapes procedures and methods for auditing and addressing risk and non-compliance to information security standards.
Fosters strong relationships with senior leaders and stakeholders to understand and map out business priorities and how security engagement can be effectively managed to deliver secure design solutions.
A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

Minimum Qualifications

Ten or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.

Preferred Qualifications

Bachelor’s Degree in Engineering, Information Technology, Cybersecurity, Environmental or Physical Sciences, Business or related discipline.
Familiarity with security frameworks (e.g., NIST CSF / NIST 800-53, ISO 27001) and translating requirements into implementable controls and evidence.
Hands-on security assessment experience across enterprise environments (on-prem + cloud) including control validation, configuration review, penetration testing, code review, and/or vulnerability triage.
CISSP, GSEC, GICSP, or other related security certifications
Strong OS and network fundamentals (Windows/Linux internals, TCP/IP, DNS, PKI/TLS) applied to troubleshooting and security analysis.
Operational Technology exposure (industrial networks, Purdue model concepts, segmentation, asset inventory constraints) or clear willingness to learn OT.

Additional Information

This position’s work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days.  Unless otherwise noted, employees are required to work and reside in the state of California or Washington, DC.  Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!
Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
The primary work location for this position is Rosemead, CA or Washington, DC.
Position will require up to 10% traveling and being out in the field throughout the SCE service territory.
This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
Relocation may apply to this position.

About Southern California Edison

The people at SCE don't just keep the lights on. Our mission is so much bigger. We’re fueling the kind of innovation that’s changing an entire industry, and quite possibly the planet. Join us and create a future with cleaner energy, while providing our customers with the safety and reliability they demand. At SCE, you’ll have a chance to grow personally and professionally, making a real impact in Southern California and around the world.

Southern California Edison is a proud Equal Opportunity Employer, including disability and protected veteran status.

We are committed to ensuring that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodations at [email protected] or (626) 302-3456 and select option 2.

About the Company

Edison International

Public utility holding company; electricity.

Edison International is a public utility holding company and the parent of Southern California Edison, which delivers electricity to about 15 million people. It generates and distributes electric power and focuses on clean energy adoption and environmental stewardship, mainly through its regulated utility operations in California. Its products and services work by generating electricity and then delivering it to customers via the power grid and distribution network. What sets Edison International apart is its role as a regulated utility leader in California with a clear emphasis on transitioning to cleaner energy and reducing environmental impact, rather than pursuing unregulated energy ventures. The company’s goal is to help transform the electric power industry toward a cleaner energy future while providing reliable electricity to customers.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Rosemead, CA
Founded: 1886

Recently Posted Jobs

Explore more opportunities at Edison International

See more jobs