Назад
Company hidden
7 дней назад

Cybersecurity Senior Specialist

143 900 - 215 800$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Senior Specialist (Grid/OT, NERC CIP): Developing and leading cybersecurity governance for electric grid and operational technology environments with an accent on NERC CIP compliance, SCADA and substation controls, risk management, and audit readiness. Focus on translating regulatory obligations into enforceable controls, assessing vulnerabilities, managing incidents, and driving remediation across critical infrastructure.

Location: Hybrid, primarily Rosemead, California; employees must work and reside in California unless otherwise noted. The role may require extended assignments across the SCE service territory, up to 5% travel and field work, and reporting to an SCE facility for a set number of days.

Salary: $143,900–$215,800

Company

hirify.global provides electric utility services and develops clean-energy infrastructure focused on safety, reliability, innovation, and reducing carbon emissions.

What you will do

  • Own the multi-year Grid/Operational Technology cybersecurity governance strategy, including priorities, guiding principles, measurable outcomes, and metrics.
  • Translate NERC CIP obligations into practical control requirements, evidence expectations, and guidance for SCADA and substation systems.
  • Provide cybersecurity expertise across Grid/OT projects and stakeholder engagements; develop policies, standards, and technical requirements; assess adherence; identify risks; and define risk-management approaches.
  • Lead governance reviews covering control effectiveness, audit readiness, risk reduction, compliance issues, exceptions, and remediation plans.
  • Perform security risk and vulnerability assessments, business impact analyses, project reporting, security monitoring, incident investigations, and forensic activities.
  • Maintain incident response plans, security controls, metrics, alerts, dashboards, reports, and audit evidence while protecting sensitive company and customer information.

Requirements

  • Five or more years of experience in information technology, information security, and/or cybersecurity.
  • US citizenship is required.
  • Ability to complete a NERC/CIP Personnel Risk Assessment or Background Investigation before hire and specified training before obtaining unescorted access to assigned work locations.
  • Ability to perform security risk, vulnerability, and business impact assessments; manage technology risks; investigate suspected attacks; and perform incident response activities.
  • Ability to develop and maintain security controls, metrics, alerts, dashboards, reports, incident response plans, and audit evidence.

Nice to have

  • Bachelor’s degree or higher in computer science, information technology, business administration, or a related field.
  • Experience with Grid/OT technologies, environments, and operations, including NERC CIP regulatory compliance and/or audits.
  • Experience developing cybersecurity strategy, policies, processes, and metrics, as well as implementing, enforcing, and monitoring security controls.
  • Knowledge of or experience with the NIST Cybersecurity Framework.
  • Professional certifications such as CISSP, CISM, CISA, CRISC, GIAC, or other relevant certifications.
  • Excellent communication and collaboration skills, strong analytical and problem-solving abilities, and close attention to detail.

Culture & Benefits

  • Hybrid work mode with remote work available on remaining days after reporting to an SCE facility for a set number of days.
  • Work supports clean energy, reduced carbon emissions, and reliable service for customers.
  • Work may include assignments at various locations throughout the SCE service territory.
  • Relocation may apply to the position.

Hiring process

  • Further hybrid work-mode details will be discussed during the interview.
  • Before hire, candidates for the NERC/CIP impacted position must pass a Personnel Risk Assessment or Background Investigation.
  • After hire, specified training must be completed before unescorted access and performance of necessary job duties.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →