Description
Sempra: Where opportunity powers impact
At Sempra, we tackle the biggest energy challenges that face our industry. Our
high-performing team leverages the full capabilities of our organization to
serve 40 million consumers across North America. By collaborating and
challenging one another across multiple disciplines, we inspire our best work,
ideas and innovation. From increasing liquified natural gas (LNG) capacities to
reducing carbon emissions to helping people prepare for the realities of climate
change, we are committed to building a better energy future for all.
Primary Purpose
Applies foundational knowledge to support the organization’s cybersecurity
awareness and training program. Completes defined assignments under guidance,
helps educate employees on cybersecurity best practices, and supports efforts to
promote a culture of security across the enterprise.
This role assists with developing and delivering awareness content, supporting
training initiatives, creating, coordinating and delivering social engineering
campaigns, and measuring program effectiveness.
Duties and Responsibilities
* Cyber Alerts: Assist the Security Operations Center (SOC), Threat
Intelligence, and other cybersecurity teams with preparing, coordinating, and
distributing cybersecurity alerts, threat advisories, and practical security
guidance. Help translate technical threats into clear, business-focused
communications so employees can recognize and respond appropriately to
emerging risks.
* Training and Awareness Content: Assist with creating, updating, and
organizing cybersecurity awareness and education materials that support
security objectives and encourage secure employee behaviors. Prepare clear
and engaging learning content for different employee audiences using
established guidance and templates.
* Cybersecurity Communications: Support routine cybersecurity communications,
including newsletters, awareness campaigns, threat advisories, and leadership
messages. Help keep employees informed about emerging threats, security best
practices, and organizational cybersecurity initiatives.
* Cyber Tips and Micro-Learning: Assist with creating and sharing timely
cybersecurity tips and short learning content that reinforce secure
behaviors. Provide practical guidance, using approved information, to help
employees identify and avoid threats such as phishing, vishing, smishing,
quishing, social engineering, and account compromise.
* Presentations and Speaking Engagements: Help prepare and deliver
cybersecurity awareness presentations for employee groups, onboarding
programs, town halls, and other company events. Explain basic cybersecurity
concepts clearly to technical and non-technical audiences.
* Cyber Champion Program: Support the Cyber Champion program by helping
coordinate communications, meetings, awareness activities, and training
resources. Assist Champions with accessing information and materials they can
use to promote cybersecurity within their business units.
* Cyber Safety SharePoint Program: Update and organize content on the Cyber
Safety SharePoint site, including awareness resources, training materials,
communications, toolkits, alerts, and knowledge articles. Review assigned
content for accuracy, relevance, and alignment with current cybersecurity
guidance.
* Cybersecurity Events and Outreach: Assist with planning and coordinating
company-wide cybersecurity events, awareness campaigns, workshops, webinars,
and guest speaker engagements. Support event logistics, content preparation,
vendor coordination, audiovisual needs, and employee engagement activities.
* Vendor and Partner Support: Assist with routine coordination and
communication with cybersecurity vendors, consultants, and partners. Help
track procurement, implementation, and ongoing service activities that
support awareness and training initiatives.
* Program Measurement and Improvement: Collect and organize program metrics,
reports, and employee feedback to help assess cybersecurity awareness
activities. Identify routine improvement opportunities and assist with
approved updates that strengthen employee awareness and reduce human risk.
* Team Support and Development: Build knowledge of cybersecurity awareness,
communications, and employee engagement through assigned work and guidance
from experienced team members. Share helpful information, follow established
best practices, and participate in team learning activities.
* Assist with enterprise cybersecurity initiatives and assigned objectives
under guidance.
* Review cybersecurity awareness documentation, training materials,
presentations, and leadership communications for clarity, accuracy, and
consistency, and suggest basic updates as needed.
* Work with Information Security, IT, Human Resources, Corporate
Communications, and business units to support cybersecurity awareness goals
and complete assigned activities.
* Performs other duties as assigned.
Qualifications
Qualifications
Education
* Typically requires a 4-year degree in a relevant field, or equivalent
combination of relevant education and experience.
Licenses and Certifications
* CISSP, CISA, SANS are preferred
Experience
Required:
* Typically requires 0 years of related experience.
Preferred:
1-2 years of experience in:
* Developing, facilitating, implementing, and communicating training material,
policies and information to a corporate audience.
* Progressive experience working within IT and/or enterprise cybersecurity with
experience in cybersecurity process, risk assessments, governance, and/or
project management.
* Experience working collaboratively or independently with minimal supervision
while managing multiple simultaneous tasks.
Knowledge, Skills and Abilities:
* Clear written, verbal, presentation, and interpersonal communication skills,
with the ability to explain basic cybersecurity concepts to technical and
non-technical audiences.
* Ability to prepare presentations, briefings, awareness materials,
newsletters, training content, and employee communications using established
guidance and templates.
* Ability to support employee awareness and encourage secure behaviors through
clear communications, education, and engagement activities.
* Ability to create and update cybersecurity awareness content across
communication channels such as SharePoint, presentations, newsletters,
videos, alerts, toolkits, and digital communications.
* Willingness to present information to employee groups, business partners, and
other audiences with guidance and preparation.
* Basic analytical and reporting skills, including the ability to collect data,
track employee participation, and summarize program results.
* Proficiency with Microsoft 365 applications and digital communication
platforms.
* Ability to organize and complete multiple assigned tasks while working
independently and collaboratively within established priorities and
deadlines.
* Effective organizational, planning, and task coordination skills.
* Ability to build positive working relationships with business partners,
technical teams, vendors, and external partners.
Must reside in Southern California or be willing to relocate upon hire.
We may consider candidates at a higher level based on qualifications and
relevant experience.