Cybersecurity Manager

1 month ago


San Diego, United States Sempra Full time
Req Num 24-70402

Job Description

Sempra: Where opportunity powers impact  

At Sempra, we tackle the biggest energy challenges that face our industry. Our high-performing team leverages the full capabilities of our organization to serve 40 million consumers across North America. By collaborating and challenging one another across multiple disciplines, we inspire our best work, ideas and innovation. From increasing liquified natural gas (LNG) capacities to reducing carbon emissions to helping people prepare for the realities of climate change, we are committed to building a better energy future for all. 

Primary Purpose

The primary responsibility of the Cybersecurity Governance Manager is to enhance and lead the Corporate Cybersecurity IT Governance Program in collaboration with the IT and Cybersecurity teams at Sempra Companies. This role demands strong leadership and project management skills, along with the expertise to conduct comprehensive system-wide security analyses, evaluate the effectiveness of controls, assess risks, and develop policies, standards, and guidelines.

Duties and Responsibilities

  • Corporate policies and standards: Develops enterprise cybersecurity policies and standards. Aligns policies to National Institute of Standards and Technology (NIST) and other regulatory frameworks. Communicates updates and maintains the roadmap for future policy requirements. Liaison with business units to communicate, educate, and clarify and policy questions.
  • Metrics and reporting: Creates and maintains metrics and reports for the Corporate Cyber Council and Board. Establishes processes for consistent, accurate, and repeatable reporting.
  • GRC Operating Model: Implements and maintains the General Rate Case (GRC) tool and processes to support tracking and monitoring of risks, issues, and risk exception for Sempra Companies.
  • Team Management: Provides leadership to a team made up of employees and third parties. Provides direction, motivation, and strategic oversight. Owns all aspects of employee management for a large team, directing work and providing guidance. Responsible for all aspects of performance management, training, and development. May supervise team leads.
  • Management self-assessment program: Performs and/or engages a third party to perform assessments of any process with cybersecurity risk to evaluate the risks and adequacy of controls. Establishes meaningful recommendations considering risk and impact to business processes where gaps are identified.
  • Approves contracts and services with 3rd party vendors.
  • Performs other duties as assigned.

Qualifications

Education

  • Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Business Administration, related field, or equivalent experience is required.  

Experience 

  • 8 years of Relevant Experience: A strong background in cybersecurity governance, IT Risk Management, or a related field is required.
  • 6 years of Leadership: Proven experience in supervisory and leadership roles is required.
  • 6 years of Reporting and Metrics: Expertise in creating reports and metrics for senior business executives and/or the Board is required.
  • 6 years of GRC Tooling: Hands-on experience with GRC tool-sets (Governance Risk and Compliance), especially ServiceNow GRC/IRM, is required.
  • 6 years of Project Management: Demonstrated ability to manage projects in a fast-paced, collaborative environment, track progress, manage key deliverables, and report to executives is required.
  • 2 years of Industry Experience: Experience in the energy sector or with a utility is preferred.
  • Must reside in Southern California or be willing to relocate upon hire.
  • We offer a hybrid work environment.  Although the schedule may vary, typically this will allow you to work from the office three days per week and work remotely on the remaining workdays.

Skills and Abilities 

  • Stakeholder Management: Advanced ability to create and maintain strong relationships with stakeholders to drive outcomes and align around a vision or course of action is required.
  • Team / Initiative Management: Advanced demonstrated ability to operate and innovate within a small team in a fast-paced environment, balancing strategic and tactical needs. Flexibility to adapt to changing assignments and effectively prioritize. Highly self-motivated, goal-oriented, and self-directed is required.
  • Communication: Advanced ability to communicate technical ideas and strategies effectively to non-technical audiences, including executive leadership, through various mediums (e.g., written communications, verbal communications, presentations). Strong analytical skills and the ability to organize work logically, thoroughly, and succinctly. Effective written and verbal English communication at all levels, providing compliance guidance to project teams, management, and business partners is required.
  • Cybersecurity & Technology Trends: Advanced understanding of emerging trends in the cybersecurity and technology landscape, including new technologies, processes, and ways of working. Ability to determine the impact of technological advancements on the company's systems, applications, infrastructure, and practices. Strong understanding of risk management principles, regulatory requirements, and industry best practices. Good understanding of General IT Controls and Data Privacy Regulations is required.
  • Vendor / Contract Management: Advanced ability to build effective relationships and manage the execution of projects delivered by third-party providers, suppliers, and partners is required.
  • Financial Acumen: Advanced financial acumen, including the ability to accurately report spending in the IT function and an understanding of both CapEx and OpEx budgets is required.
  • Business Functional Knowledge: Advanced knowledge and understanding of the business context, market, and operational functions of the operating company and the wider utilities industry. Good understanding of IT systems and controls, including web systems, e-commerce, data centers, network infrastructure, patching, access controls, databases, CRM, and cloud systems is preferred.

Licenses and Certifications

Certified Information Systems Security Professional (CISSP) is preferred.

Read the full posting.



  • San Diego, California, United States Imagine One Technology & Management Ltd Full time

    Cybersecurity Program ManagerImagine One Technology & Management Ltd is seeking a highly experienced Cybersecurity Program Manager to lead our team in delivering cutting-edge cybersecurity solutions to our clients. As a key member of our team, you will be responsible for managing and executing complex cybersecurity projects, ensuring the highest level of...


  • San Diego, California, United States RSI Security Full time

    About the Role:RSI Security is seeking a highly skilled Technical Project Manager to lead and oversee the planning, implementation, and tracking of cybersecurity projects. The ideal candidate will have a background in cybersecurity and risk management, with experience in project management software and a strong understanding of cybersecurity frameworks and...


  • San Diego, California, United States RSI Security Full time

    Job Summary:RSI Security is seeking a skilled Cybersecurity Project Manager to lead and oversee the planning, implementation, and tracking of cybersecurity projects. The ideal candidate will have a background in cybersecurity and risk management, with experience in project management software and strong communication and client-facing skills.Key...


  • San Diego, California, United States Sodexo Full time

    Job SummaryWe are seeking a highly skilled Cybersecurity Program Manager to join our team at Sodexo. As a key member of our Healthcare Technology Management (HTM) team, you will be responsible for leading our cybersecurity initiatives and ensuring the security of our clients' clinical technology systems.Key Responsibilities:Develop and implement...


  • San Diego, California, United States RSI Security Full time

    Job OverviewWe are seeking a highly skilled Technical Project Manager to lead and oversee the planning, implementation, and tracking of cybersecurity projects. The ideal candidate will have a background in cybersecurity and risk management, with experience in project management software and a strong understanding of cybersecurity frameworks and...


  • San Diego, California, United States Sempra Services Corporation Full time

    Cybersecurity Governance Manager Job DescriptionSempra Services Corporation is seeking a highly skilled Cybersecurity Governance Manager to lead our Corporate Cybersecurity IT Governance Program. As a key member of our team, you will be responsible for enhancing and leading the program in collaboration with the IT and Cybersecurity teams.Key...


  • San Diego, California, United States Sempra Energy Full time

    Job DescriptionAt Sempra Energy, we are committed to building a better energy future for all. As a Cybersecurity Governance Manager, you will play a critical role in enhancing and leading the Corporate Cybersecurity IT Governance Program in collaboration with the IT and Cybersecurity teams.Key ResponsibilitiesDevelop and maintain enterprise cybersecurity...


  • san diego, United States Platform Science Full time

    Who We AreAt Platform Science, we’re working to connect everything that moves.Founded in 2015, we are an open IoT platform that partners with innovative fleets, application developers, vehicle manufacturers, and equipment providers in the transportation industry to deliver revolutionary solutions to supply chain professionals across the globe.Our employees...


  • San Diego, California, United States LPL Financial Holdings, Inc. Full time

    About the RoleWe are seeking a highly motivated and detail-oriented individual to join our team as a Cybersecurity Risk Management Intern. As a member of our team, you will have the opportunity to work on real-world projects and contribute to the development of our cybersecurity risk management lifecycle.Key ResponsibilitiesSupport the Senior Analyst and...


  • San Diego, California, United States SAIC Full time

    About the JobSAIC is seeking a highly skilled Cybersecurity Engineer to support Project Overmatch. In this role, you will be responsible for providing top-notch engineering support services, software engineering, and cybersecurity engineering.The selected candidate will prepare, implement, and ensure compliance with cybersecurity policy, to include...


  • San Diego, California, United States AERMOR Full time

    Job Summary:AERMOR is seeking a Cybersecurity Engineer II to play a crucial role in ensuring the security of Navy and Department of Defense (DoD) information systems. This position involves implementing, managing, and maintaining cybersecurity controls, conducting security assessments, and supporting Risk Management Framework (RMF) processes to protect...


  • San Diego, California, United States AERMOR Full time

    Job Summary:AERMOR is seeking a highly skilled Cybersecurity Engineer II to play a crucial role in ensuring the security of Navy and Department of Defense (DoD) information systems. This position involves implementing, managing, and maintaining cybersecurity controls, conducting security assessments, and supporting Risk Management Framework (RMF) processes...


  • San Diego, California, United States Imagine One Technology and Management Ltd Full time

    Job Title: Cybersecurity Engineer IIIJob Summary:We are seeking a highly skilled Cybersecurity Engineer III to provide research and engineering services for the U.S. Navy. The ideal candidate will have a minimum of five years of Cybersecurity experience in performing system hardening, STIG implementation, and vulnerability...


  • San Diego, California, United States Programs Management Analytics and Technologies, Inc. Full time

    Cybersecurity Engineer IIPrograms Management Analytics and Technologies, Inc. is seeking a highly skilled Cybersecurity Engineer II to join our team. As a key member of our cybersecurity team, you will be responsible for providing high-quality engineering support services, software engineering, and cybersecurity engineering.In this role, you will be an...


  • San Diego, California, United States AERMOR LLC Full time

    Job OverviewAERMOR LLC is seeking a highly skilled Cybersecurity Engineer I to join our team. The successful candidate will be responsible for supporting the implementation and management of cybersecurity measures for Navy and Department of Defense (DoD) systems.Key ResponsibilitiesAssist in the implementation of security controls in accordance with DoD and...


  • San Diego, California, United States PMAT Full time

    Job DescriptionCybersecurity Engineer IIPMAT is seeking a skilled Cybersecurity Engineer to provide high-quality engineering support services, software engineering, and cybersecurity engineering. The successful candidate will be an integral team member supporting assured Command and Control capabilities for our DoD customer within the Navy Information...


  • San Diego, California, United States Proofpoint Full time

    Job DescriptionWe are seeking a highly skilled Cybersecurity Sales Professional to join our team at Proofpoint. As a key member of our sales team, you will be responsible for managing a portfolio of named accounts and driving revenue growth through the sale of our cybersecurity solutions.Key Responsibilities:Manage a portfolio of named accounts and develop...


  • San Diego, California, United States Prosync Full time

    Job Title: Cybersecurity SpecialistJob Summary:ProSync is seeking a highly skilled Cybersecurity Specialist to join our team. As a Cybersecurity Specialist, you will be responsible for ensuring the security and intelligence compliance of our organization with policies and regulations.Responsibilities:Formulating plans, policies, procedures, and other...


  • San Diego, California, United States FGS, LLC Full time

    Cybersecurity SpecialistProvide IA security support services to NAVWAR PMO for programs and projects. Assist in reviewing existing documentation, IA controls, and DISA STIG implementations for applicability as part of developing IT system security documentation for IA compliance. Conduct security tests and evaluation (ST&E) for accreditation or...


  • San Diego, California, United States ISPA Technology Full time

    Cybersecurity Analyst Role OverviewISPA Technology is seeking a highly skilled Cybersecurity Analyst to join our team at the forefront of defense technology. As a Cybersecurity Analyst, you will play a pivotal role in fortifying the resilience of software systems designed to support the United States Marine Corps (USMC), safeguarding national security...