Cybersecurity Senior II

Sempra: Where opportunity powers impact 

At Sempra, we tackle the biggest energy challenges that face our industry. Our high-performing team leverages the full capabilities of our organization to serve 40 million consumers across North America. By collaborating and challenging one another across multiple disciplines, we inspire our best work, ideas and innovation. From increasing liquified natural gas (LNG) capacities to reducing carbon emissions to helping people prepare for the realities of climate change, we are committed to building a better energy future for all. 

Primary Purpose

Strengthens information security by leading risk assessments, designing secure configurations, and coordinating incident response activities. Contributes to strategic initiatives by integrating security practices into projects and advising on compliance requirements. 

This role manages cybersecurity awareness capabilities and technologies while developing, implementing, and communicating enterprise-wide information security initiatives that reduce organizational risk and strengthen the company's security culture.

This role also develops and delivers strategic awareness campaigns, annual cybersecurity training programs, and targeted communications that promote secure behaviors and increase employee understanding of cybersecurity threats and best practices. The role serves as a key liaison between Information Security, IT, business leaders, and technical subject matter experts to ensure awareness initiatives align with both business objectives and security priorities.

Duties and Responsibilities

• Cyber Alerts: Partner with the Security Operations Center (SOC), Threat Intelligence, and other cybersecurity teams to develop and distribute alerts, threat advisories, and actionable guidance; translate technical threats into clear, business-focused communications.
• Training and Awareness Content: Design, develop, and maintain engaging cybersecurity education materials that support enterprise security objectives and promote secure behaviors across diverse audiences.
• Cybersecurity Communications: Develop and manage newsletters, awareness campaigns, threat advisories, and executive messaging that keep employees informed about emerging threats, security best practices, and organizational initiatives.
• Cyber Tips and Micro-Learning: Create timely tips and micro-learning content that reinforce secure behaviors and provide practical guidance for recognizing and avoiding phishing, vishing, smishing, quishing, social engineering, and account compromise.
• Presentations and Speaking Engagements: Develop and deliver cybersecurity awareness presentations for leadership teams, employee groups, onboarding programs, town halls, and enterprise-wide events, tailoring concepts for technical and non-technical audiences.
• Cyber Champion Program: Lead the development, promotion, and ongoing support of the program, coordinating communications, meetings, awareness activities, and training resources that enable Champions to advocate within their business units.
• Cyber Safety SharePoint Program: Manage and maintain the Cyber Safety SharePoint site as the central hub for awareness resources, training materials, communications, toolkits, alerts, and knowledge articles, ensuring content remains accurate, relevant, engaging, and aligned with evolving risks and business priorities.
• Cybersecurity Events and Outreach: Plan and execute company-wide events, awareness campaigns, workshops, webinars, and guest speaker engagements, including logistics, content development, vendor coordination, audiovisual requirements, and employee engagement.
• Vendor and Partner Management: Collaborate with cybersecurity vendors, consultants, and strategic partners throughout procurement, implementation, and ongoing management to support successful awareness and training initiatives.
• Program Strategy and Continuous Improvement: Measure program effectiveness through metrics, reporting, and employee feedback, then implement enhancements that strengthen cybersecurity maturity and reduce human risk.
• Leadership and Mentorship: Provide subject matter expertise in cybersecurity awareness, communications, and employee engagement; mentor junior team members, share best practices, and support team development.
• Additional Responsibilities
• Support enterprise cybersecurity initiatives and strategic objectives as assigned.
• Review and enhance cybersecurity awareness documentation, training materials, presentations, and executive communications.
• Collaborate across Information Security, IT, Human Resources, Corporate Communications, and business units to advance cybersecurity awareness goals.
• Perform other duties as assigned.

Skills and Abilities

• Exceptional written, verbal, presentation, and interpersonal communication skills, with the ability to effectively communicate complex cybersecurity concepts to technical and non-technical audiences.
• Strong business and executive communication skills, including experience developing presentations, executive briefings, awareness campaigns, newsletters, training materials, and enterprise communications.
• Demonstrated ability to influence employee behaviors and promote security awareness through strategic communications, education, and engagement initiatives.
• Ability to develop and deliver cybersecurity awareness content across a variety of communication channels, including SharePoint sites, presentations, newsletters, videos, alerts, toolkits, and digital communications.
• Experience presenting to executive leadership, employee groups, business stakeholders, and large audiences.
• Strong analytical and reporting skills with the ability to measure program effectiveness, employee engagement, and awareness outcomes.
• Proficiency with Microsoft 365 applications and digital communication platforms.
• Ability to manage multiple projects and priorities while working independently and collaboratively in a fast-paced environment.
• Strong organizational, planning, and project management skills.
• Ability to build effective working relationships with business leaders, technical teams, vendors, and external partners.

Qualifications

Education

Required:

• Typically requires a 4-year degree in a relevant field, or equivalent combination of relevant education and experience.

Experience

Required:

• Typically requires 8 years of related experience.

Licenses and Certifications

• CISSP, CISA, SANS are preferred. 

Knowledge, Skills and Abilities

Required:

• Ability to design or enhance security solutions addressing complex risks.
• Ability to influence technology and business teams on secure design practices.
• Ability to operate autonomously on high-impact or sensitive security efforts.
• Advanced knowledge of enterprise cyber security architecture and controls.
• Knowledge of cross-functional dependencies affecting information security.
• Skill in leading security assessments or improvement initiatives.
• Skill in mentoring junior security professionals.

Preferred: 

3-5 years of experience in:

• Developing, facilitating, implementing, and communicating training material, policies and information to a corporate audience.
• Progressive experience working within IT and/or enterprise cybersecurity with experience in cybersecurity process, risk assessments, governance, and/or project management.
• Experience working collaboratively or independently with minimal supervision while managing multiple simultaneous tasks.

Must reside in Southern California or be willing to relocate upon hire.