Supervisor, Security Operations Center

Pacific Gas And Electric Company•Vacaville, CA

1d•$122,000 - $194,000•Onsite

About The Position

Reporting to the Security Operations & Access Control Manager, the Security Operations Center (SOC) Supervisor provides day-to-day supervision of a full-scale enterprise security operations center, delivering 24/7 security monitoring and incident response in support of California’s most critical infrastructure. The supervisor leads the SOC Incident Command function and oversees daily incident response execution across employees and contract operators, ensuring consistent, compliant, and high-quality outcomes. As the organization’s primary point of contact for security support, the SOC is often the first line of interaction with PG&E coworkers and plays a critical role in shaping the enterprise security brand and user experience through clear communication, professionalism, and timely service. The supervisor ensures adherence to regulatory requirements, internal policies, and operational standards; maintains accurate documentation and escalation; and coordinates communications during events. They also strengthen SOC capabilities through continuous improvement across people, process, and technology—enhancing detection, response, resilience, and audit readiness. In partnership with the SOC Manager, the supervisor supports the SOC maturity roadmap and helps translate strategy into execution, including staffing, training, and technology improvements that advance SOC operations. They provide leadership and expertise across security functional areas and build strong relationships with Lines of Business to address security and compliance concerns impacting PG&E’s most critical assets. The supervisor also serves as a key integrator across Field Security, Operations teams, and Investigations—coordinating active incident response during emergencies and ensuring seamless handoffs from triage through investigation and resolution. This role is ideal for a combined builder and operator—an innovative people leader who is passionate about leading teams, managing high-impact incidents, and maturing a primary operating function within the security organization. The role is on-site in Vacaville at the Security Operations Center. The working hours are Monday – Friday, normal business hours with varied on-call responsibilities.

Requirements

Bachelor’s degree or equivalent work experience
10 years’ experience in the physical security or law enforcement field
People leadership experience in a Security Operations Center (SOC) environment (e.g., GSOC/ESOC) or related operations
CA Class C License, or equivalent

Nice To Haves

Demonstrated incident command / critical event management experience (e.g., managing escalations, coordinating stakeholders, running bridge calls).
Experience leading 24/7 operations (multi-shift environment) with scheduling, coverage planning, and on-shift decision-making.
Experience supervising vendors/contract operators/team members and holding them to KPIs/SLAs
Proficient in Enterprise Security Technology systems
Experience in security compliance policies and procedures administration
Experience building/maturing SOC/GSOC programs (playbooks, runbooks, SOPs, metrics, QA).
Metrics/KPI mindset: experience establishing and reporting performance measures (response times, quality, compliance, after-action closure).
Experience in change management and continuous improvement.
Experience operating in a NERC regulated environment.
Track record of developing teams through coaching, clear expectations, and accountability in a high tempo environment.

Responsibilities

Supervises SOC operational procedures, playbooks, and response measures to buy down risk, ensure compliant execution, and maintain adaptability to evolving business needs.
Directly supervises and develops a SOC organization of approximately 40 (including shift leads and operators), ensuring staffing coverage, clear expectations, and strong on-shift leadership.
Tracks and reports SOC performance and compliance measures (e.g., response timeliness, documentation quality, and adherence to procedures), escalating trends and recommending improvements.
Owns day-to-day SOC technology and systems health (e.g., access control, video management, alarm monitoring, and incident management platforms), ensuring uptime, data quality, user readiness, and timely issue triage and resolution in partnership with IT.
Leads identification, evaluation, and integration of new protective technologies and capabilities (e.g., enhanced monitoring, analytics, automation, and workflow improvements); partners closely with IT and Cyber Security to deliver secure, scalable solutions that improve detection, response, and operator efficiency.
Supports the SOC technology roadmap and lifecycle (requirements, testing, change management, training, and adoption), ensuring tools and integrations are implemented safely with minimal operational disruption and measurable performance improvements.
Provides leadership, coaching, and development to employees through structured goal setting, performance management, and development planning, while ensuring consistent, timely, and candid feedback.
Partners across Field Security, Operations teams, and Investigations, as well as Lines of Business and external agencies, to coordinate active incident response during emergencies, support investigations, and drive clear, timely stakeholder communications.
Leads after-action reviews and verifies corrective actions are implemented; validates effectiveness to prevent recurrence and drives continuous improvement in SOC processes.
Plans, facilitates, and schedules regular emergency training exercises and joint drills with Field Security, Operations, and Investigations to ensure SOC activation readiness and coordinated response during incidents.
Develops and implements training for SOC Shift Leads and Contract Operators.
Leads corporate, physical, and investigative security response activities, ensuring accurate triage, documentation, and coordination with Investigations teams for case intake, evidence handling, and timely handoffs through resolution.