Info Systems Audit Associate II

Sempra; San Diego (CA); Hybrid; USD 82,000 - 130,000; Full time

Job summary

Sempra’s Information Systems Audit team seeks an Associate II to conduct internal IT audits with a cybersecurity focus in San Diego. You’ll test controls, assess risks, and communicate findings to stakeholders, helping strengthen security frameworks across the organization.

Ideal candidates bring a 4-year degree and about 2 years of related audit experience, with a readiness to work a hybrid schedule in Southern California.

Qualifications

• 4-year degree in a relevant field or equivalent work experience.
• Typically requires 2 years of related audit experience.
• Must reside in Southern California or be willing to relocate.

Responsibilities

• Performs control testing for IT systems and evaluates evidence against criteria.
• Examines privileged access, security configurations, logging, and artifacts.
• Summarizes tests and drafts observations linking criteria, cause and effect.
• Coordinates with technology teams for data extracts and configuration exports.
• Participates in meetings and follows up on remediation activities.

Skills

IT Audit

Risk Assessment

InfoSec Standards

Data Analytics

Network Security

Cybersecurity

Controls Evaluation

Regulatory Compliance

Documentation

Continuous Monitoring

Education

Bachelor's degree

Job description

Info Systems Audit Associate II#26-74227San Diego, California, United StatesApply### Job Description**Sempra: Where opportunity powers impact**At Sempra, a better world begins with better energy—and with people who want to make a difference. That’s why we’re tackling the biggest challenges facing our industry while building ahigh‐performance culture where you can do your best work. Together, our teams support nearly 40 million consumers across the U.S., strengthening the communities we serve and creating impact that extends far beyond the workplace. Here, collaboration, inclusivity and shared purpose empowers you to grow your passion, build a rewarding career and contribute to something bigger—helping shape a better energy future for all.**Primary Purpose** The role primarily focuses on conducting comprehensive internal audits of IT systems with an emphasis on evaluating cybersecurity risks. By collaborating with cross-functional teams, the role will address key vulnerabilities, assess control mechanisms, and contribute to the overall strengthening of IT security frameworks and risk mitigation strategies. The position executes a broad range of testing and analysis for information systems audits. It recommends practical adjustments to test steps, communicate routine issues to stakeholders, and contribute to reporting. **Duties and Responsibilities*** Performs control testing for application, technology, and operations processes and evaluates whether evidence meets defined criteria.* Proposes refinements to test procedures when populations or tools differ from plan while maintaining methodological compliance.* Analyzes privileged access, security configuration hardening, logging and other cybersecurity control artifacts to identify exceptions and potential impact.* Summarizes testing results and drafts preliminary observations that link criteria, condition, cause, and effect.* Coordinates with technology teams to obtain extracts or configuration exports required for sampling and analysis.* Participates in entrance and exit meetings, explaining straightforward procedures and conclusions.* Contributes to follow‐up reviews by confirming remediation activities and gathering validation evidence.* Performs other duties as assigned.### Qualifications**Education*** Typically requires a 4-year degree in a relevant field, or equivalent combination of relevant education and experience.**Experience*** Typically requires 2 years of related experience.* Must reside in Southern California or be willing to relocate upon hire.**Skills and Abilities*** IT Audit Methodologies - Proficiency in applying structured approaches and methodologies for conducting IT audits, ensuring thorough evaluation of systems and controls.* Risk Assessment Techniques - Expertise in identifying and assessing risks associated with information systems, and developing strategies to mitigate these risks.* Information Security Standards - Understanding of industry standards and frameworks such as ISO 27001, NIST, and COBIT for evaluating and improving information security practices.* Data Analytics Tools - Proficiency in using data analysis tools to examine large datasets for patterns and anomalies that may indicate fraudulent activity.* Network Security Assessment - Ability to evaluate and assess network security controls, identifying vulnerabilities and recommending improvements to protect information assets.* Cybersecurity Fundamentals - Knowledge of cybersecurity principles and practices to assess the effectiveness of security measures and protect against digital threats.* System and Application Controls - Expertise in evaluating system and application controls to ensure accuracy, reliability, and security of data processing and information flows.* Regulatory Compliance - Ensuring an organization's adherence to laws, regulations, guidelines and specifications relevant to its business processes.* Report Writing and Documentation - Skill in preparing detailed reports and documentation of fraud investigations and prevention activities for stakeholders.* Continuous Monitoring Tools - Proficiency in implementing and utilizing continuous monitoring tools to track system performance and detect potential security breaches in real time.### Work ScheduleHYBRID: Work a combination of onsite and remote days each week, typically 4 days per week onsite.### Area of InterestAccounting/Finance### Full Time/Part TimeFull-time### Posting End DateJul 13, 2026### Total Rewards PhilosophyNote: Sempra strives to ensure that employees are paid equitably and competitively. Starting salaries may vary based on factors such as relevant experience, qualifications, and education.Sempra offers a competitive total rewards package that goes beyond base salary. This position is eligible for an annual performance-based incentive (bonus) as well as other merit-based recognition. Company benefits include health and welfare (medical, dental, vision), employer contributions to retirement benefits, life insurance, paid time off, as well as other company offerings such as tuition reimbursement, paid parental leave, and employee assistance programs.### Job DetailsPay Range $82,000.00 - $130,000.00 / year### Pay TransparencyIn order to support the Fair Compensation Strategy by the US Govt., HR Dept., clients are required to adhere to "Pay Transparency Law"; in the impacted states; that have mandated the employers to list the salary ranges in Job advertisements or postings for job opportunities and Job promotions.AboutHigh-performance cultureBenefitsRecognition & awardsEngagement and InclusionNewsEmployer Privacy PolicyQualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, gender expression, sexual orientation, national origin, age, handicap or disability, or status as a Vietnam-era or special disabled veteran in accordance with state and federal law. If you have a disability that impacts your ability to complete the job application process, please contact the hiring company to request assistance or a reasonable accommodation. All qualified applicants, including those with arrest or conviction records, will be considered for employment following applicable state and local laws. You do not need to disclose your criminal history or participate in a background check until a conditional job offer is made to you. For positions covered by USDOT regulations, the company will comply with any DOT regulations related to the consideration of applicants with drug and/or alcohol related convictions.