Cybersecurity Specialist III Sempra Location: California Category: Information Technology (IT)

Primary Purpose
As a specialist in security techniques, provide visibility across the enterprise technology landscape to identify, assess and recommend risk mitigation tasks. Handle complex long-term initiatives in area of expertise, collaborating with multiple teams and stakeholders to develop improved cybersecurity technology and processes with a focus on continuous improvement. The Cybersecurity Specialist III supports cybersecurity capabilities in detecting, responding and preventing cybersecurity incidents through the development of awareness materials, engagement activities, and trainings across the organization.

Duties and Responsibilities

1. Raises the general level of awareness of information security by providing ongoing outreach using all company communications methods (i.e. articles, town hall and lunch and learn events, presentations to employees, etc.), issues cybersecurity alerts as needed, and trains employees in more depth on information security concepts by developing a corporate wide employee training program that consists of a web-based training module deployed annually.
2. Contributes to the development of strategies to reduce corporate risk by creating and implementing company-wide information security awareness and information security training programs, including the development of an annual Security Awareness Plan.
3. Creates and executes monthly phishing campaigns and produces monthly data/metrics driven phishing reports. Supports the monthly employee reward t-shirt mailing program.
4. Performs documentation review and enhancement, including the review of Information Security team materials used for external presentations and speaking engagements.
5. Plans companywide Cybersecurity events including curating content, booking of speakers, audio/visual, and catering options. Provides event planning for CISO.
6. Performs other duties as assigned (no more than 5% of duties).

Qualifications

Education

1. Bachelor's degree in cybersecurity, information systems, software engineering, computer science, related field or equivalent training and/or experience is required.

Experience

1. 4+ years of experience developing, facilitating, implementing, and communicating training material, policies and information to a corporate audience is required.
2. 3+ years establishing metrics and measurements demonstrating program effectiveness is required.
3. 2+ years of experience working within information technology and/or enterprise cybersecurity with experience in cybersecurity processes, risk assessments, governance, and/or maintaining operational systems.
4. Must reside in Southern California or be willing to relocate upon hire.
5. We offer a hybrid work environment. Although the schedule may vary, typically this will allow you to work from the office three days per week and work remotely on the remaining workdays.

Read the full posting.

#J-18808-Ljbffr