Cybersecurity Awareness Associate II

Sempra; Escondido (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

Sempra is seeking a cybersecurity awareness professional to strengthen risk, policy, and training initiatives across the enterprise. The role focuses on developing awareness content, coordinating campaigns, and measuring program effectiveness to reduce human risk.

You will collaborate with Security Operations, IT, HR, and Communications to deliver impactful training and communications that educate employees on phishing, social engineering, and other threats.

Responsibilities

• Cyber Alerts: coordinate SOC and threat teams to develop alerts and practical guidance for employees.
• Training and Awareness Content: design and maintain cybersecurity materials for diverse audiences across the organization.
• Cybersecurity Communications: manage newsletters, awareness campaigns, advisories, and executive messaging.
• Cyber Tips and Micro-Learning: deliver timely cybersecurity tips and micro-learning content to reinforce secure behavior.
• Presentations and Speaking Engagements: develop and deliver cybersecurity awareness sessions for leadership and staff.
• Cyber Champion Program: lead development, promotion, and training resources for cybersecurity advocates.
• Cyber Safety SharePoint Program: maintain the central hub for awareness resources, training, and articles.
• Cybersecurity Events and Outreach: plan company-wide events, workshops, webinars, and guest speaker engagements.
• Vendor and Partner Management: collaborate with cybersecurity vendors and partners throughout lifecycles.
• Program Strategy and Continuous Improvement: measure effectiveness and drive enhancements via metrics and feedback.
• Leadership and Mentorship: provide subject matter expertise and mentor junior team members.
• Support enterprise cybersecurity initiatives and strategic objectives as assigned.
• Review and enhance cybersecurity awareness materials and communications.
• Collaborate across IS, IT, HR, Corporate Communications, and business units to advance goals.

Job description

At Sempra, we tackle the biggest energy challenges that face ourindustry. Our high-performing team leverages the full capabilities ofour organization to serve 40 million consumers across NorthAmerica. By collaborating and challenging one another acrossmultiple disciplines, we inspire our best work, ideas andinnovation. From increasing liquified natural gas (LNG) capacitiesto reducing carbon emissions to helping people prepare for therealities of climate change, we are committed to building a betterenergy future for all.

Primary Purpose

Develops working expertise to analyze routine findings, propose straightforward corrective actions, and improve documentation quality. Coordinates inputs from multiple sources to strengthen risk, policy, and control processes. supports the organization's cybersecurity awareness and training program by helping educate employees on cybersecurity best practices and promoting a culture of security across the enterprise.

This role assists with developing and delivering awareness content, supporting training initiatives, creating, coordinating and delivering social engineering campaigns, and measuring program effectiveness.

Duties and Responsibilities

• Cyber Alerts: Partner with the Security Operations Center (SOC), Threat Intelligence, and other cybersecurity teams to develop, coordinate, and distribute cybersecurity alerts, threat advisories, and actionable security guidance. Translate technical threats into clear, business-focused communications that help employees recognize and respond appropriately to emerging risks.
• Training and Awareness Content: Design, develop, and maintain cybersecurity awareness and education materials that support enterprise security objectives and promote secure employee behaviors. Create engaging learning experiences tailored to diverse audiences across all levels of the organization.
• Cybersecurity Communications: Develop and manage ongoing cybersecurity communications, including newsletters, awareness campaigns, threat advisories, and executive messaging. Ensure employees remain informed about emerging threats, security best practices, and organizational cybersecurity initiatives.
• Cyber Tips and Micro-Learning: Create and deliver timely cybersecurity tips and micro-learning content that reinforce secure behaviors and provide practical guidance for identifying and avoiding threats such as phishing, vishing, smishing, quishing, social engineering, and account compromise.
• Presentations and Speaking Engagements: Develop and deliver cybersecurity awareness presentations for leadership teams, employee groups, onboarding programs, town halls, and enterprise-wide events. Communicate cybersecurity concepts effectively to both technical and non-technical audiences.
• Cyber Champion Program: Lead the development, promotion, and ongoing support of the Cyber Champion program. Coordinate communications, meetings, awareness activities, and training resources that enable Champions to serve as cybersecurity advocates within their business units.
• Cyber Safety SharePoint Program: Manage and maintain the Cyber Safety SharePoint site as the central hub for cybersecurity awareness resources, training materials, communications, toolkits, alerts, and knowledge articles. Ensure content remains accurate, relevant, engaging, and aligned with evolving cybersecurity risks and business priorities.
• Cybersecurity Events and Outreach: Plan, coordinate, and execute company-wide cybersecurity events, awareness campaigns, workshops, webinars, and guest speaker engagements. Manage event logistics, content development, vendor coordination, audiovisual requirements, and employee engagement activities.
• Vendor and Partner Management: Collaborate with cybersecurity vendors, consultants, and strategic partners throughout the procurement, implementation, and ongoing management lifecycle to support successful awareness and training initiatives.
• Program Strategy and Continuous Improvement: Evaluate and measure the effectiveness of cybersecurity awareness programs through metrics, reporting, and employee feedback. Identify opportunities for improvement and implement enhancements that strengthen organizational cybersecurity maturity and reduce human risk.
• Leadership and Mentorship: Provide advanced subject matter expertise in cybersecurity awareness, communications, and employee engagement. Mentor junior team members, share best practices, and contribute to the professional development of the cybersecurity awareness team.
• Support enterprise cybersecurity initiatives and strategic objectives as assigned.
• Review and enhance cybersecurity awareness documentation, training materials, presentations, and executive communications.
• Collaborate across Information Security, IT, Human Resources, Corporate Communications, and business units to advance cybersecurity awareness goals.