Supervisor, Security Operations Center

Requisition ID# 171145

Job Category: Real Estate / Facilities

Job Level: Supervisor

Business Unit: Information Technology

Work Type: Onsite

Job Location: Vacaville

Department Overview

Information Systems Technology Services (IT) is a unified organization where teams collaborate to deliver secure, reliable technology and operational outcomes. Corporate Security is fully integrated within the IT function and works closely alongside Cyber Security to protect California's critical infrastructure-connecting physical, operational, and cyber defense to reduce risk and strengthen resilience. The department is made up of forward-thinking security operators, builders, and creators who design and run protective operations that keep the organization on the forefront of modern security-combining disciplined execution with continuous improvement, innovation, and strong partnerships across the business.

Position Summary

Reporting to the Security Operations & Access Control Manager, the Security Operations Center (SOC) Supervisor provides day-to-day supervision of a full-scale enterprise security operations center, delivering 24/7 security monitoring and incident response in support of California's most critical infrastructure.

The supervisor leads the SOC Incident Command function and oversees daily incident response execution across employees and contract operators, ensuring consistent, compliant, and high-quality outcomes.

As the organization's primary point of contact for security support, the SOC is often the first line of interaction with PG&E coworkers and plays a critical role in shaping the enterprise security brand and user experience through clear communication, professionalism, and timely service. The supervisor ensures adherence to regulatory requirements, internal policies, and operational standards; maintains accurate documentation and escalation; and coordinates communications during events. They also strengthen SOC capabilities through continuous improvement across people, process, and technology-enhancing detection, response, resilience, and audit readiness.

In partnership with the SOC Manager, the supervisor supports the SOC maturity roadmap and helps translate strategy into execution, including staffing, training, and technology improvements that advance SOC operations. They provide leadership and expertise across security functional areas and build strong relationships with Lines of Business to address security and compliance concerns impacting PG&E's most critical assets. The supervisor also serves as a key integrator across Field Security, Operations teams, and Investigations-coordinating active incident response during emergencies and ensuring seamless handoffs from triage through investigation and resolution.

This role is ideal for a combined builder and operator-an innovative people leader who is passionate about leading teams, managing high-impact incidents, and maturing a primary operating function within the security organization.

The role is on-site in Vacaville at the Security Operations Center. The working hours are Monday - Friday, normal business hours with varied on-call responsibilities.

Job Responsibilities

• Supervises SOC operational procedures, playbooks, and response measures to buy down risk, ensure compliant execution, and maintain adaptability to evolving business needs.
• Directly supervises and develops a SOC organization of approximately 40 (including shift leads and operators), ensuring staffing coverage, clear expectations, and strong on-shift leadership.
• Tracks and reports SOC performance and compliance measures (e.g., response timeliness, documentation quality, and adherence to procedures), escalating trends and recommending improvements.
• Owns day-to-day SOC technology and systems health (e.g., access control, video management, alarm monitoring, and incident management platforms), ensuring uptime, data quality, user readiness, and timely issue triage and resolution in partnership with IT.
• Leads identification, evaluation, and integration of new protective technologies and capabilities (e.g., enhanced monitoring, analytics, automation, and workflow improvements); partners closely with IT and Cyber Security to deliver secure, scalable solutions that improve detection, response, and operator efficiency.
• Supports the SOC technology roadmap and lifecycle (requirements, testing, change management, training, and adoption), ensuring tools and integrations are implemented safely with minimal operational disruption and measurable performance improvements.
• Provides leadership, coaching, and development to employees through structured goal setting, performance management, and development planning, while ensuring consistent, timely, and candid feedback.
• Partners across Field Security, Operations teams, and Investigations, as well as Lines of Business and external agencies, to coordinate active incident response during emergencies, support investigations, and drive clear, timely stakeholder communications.
• Leads after-action reviews and verifies corrective actions are implemented; validates effectiveness to prevent recurrence and drives continuous improvement in SOC processes.
• Plans, facilitates, and schedules regular emergency training exercises and joint drills with Field Security, Operations, and Investigations to ensure SOC activation readiness and coordinated response during incidents.
• Develops and implements training for SOC Shift Leads and Contract Operators.
• Leads corporate, physical, and investigative security response activities, ensuring accurate triage, documentation, and coordination with Investigations teams for case intake, evidence handling, and timely handoffs through resolution.

Qualifications

Minimum:

• Bachelor's degree or equivalent work experience
• 10 years' experience inthe physical security or law enforcement field
• People leadership experience in a Security Operations Center (SOC) environment (e.g., GSOC/ESOC) or related operations
• CA Class C License, or equivalent

Desired:

• Demonstrated incident command / critical event management experience (e.g., managing escalations, coordinating stakeholders, running bridge calls).
• Experience leading 24/7 operations (multi-shift environment) with scheduling, coverage planning, and on-shift decision-making.
• Experience supervising vendors/contract operators/team members and holding them to KPIs/SLAs
• Proficient in Enterprise Security Technology systems
• Experience in security compliance policies and procedures administration
• Experience building/maturing SOC/GSOC programs (playbooks, runbooks, SOPs, metrics, QA).
• Metrics/KPI mindset: experience establishing and reporting performance measures (response times, quality, compliance, after-action closure).
• Experience in change management and continuous improvement.
• Experience operating in a NERC regulated environment.
• Track record of developing teams through coaching, clear expectations, and accountability in a high tempo environment.

Compensation

PG&E is providing the full salary/pay range for this position. The actual amount paid to an individual will be based on multiple factors, including, but not limited to, internal equity,specific skills, education, licenses or certifications, experience, market value, and geographic location. The range to reasonably expect will be around the minimum and the midpoint. Thefinal decision will be made on a case-by-case basis related to the factors above.This job is also eligible to participate in PG&E's discretionary incentive compensation programs.

Bay Area Minimum: $122,000

Bay Area Midpoint: $158,000
Bay Area Maximum: $194,000