[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Sempra jobs](https://jobs.opennash.com/companies/sempra/) · [Search jobs](/search/) Sempra · San Diego, CA # Cybersecurity Audit Associate II San Diego, California, United States Full-time Security Listed on Sempra’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Sempra’s careers site →](https://myjobs.adp.com/sempra/cx/job-details?reqId=5001202983706) [OpenNash Jobs](https://jobs.opennash.com/) / [Sempra](https://jobs.opennash.com/companies/sempra/) / Cybersecurity Audit Associate II ## Job description ### Sempra Where opportunity powers impact ​ ​At Sempra, a better world begins with better energy—and with people who want to make a difference. That’s why we’re tackling the biggest challenges facing our industry while building ahigh‑performance culture where you can do your best work. Together, our teams support nearly 40 million consumers across the U.S., strengthening the communities we serve and creating impact that extends far beyond the workplace. Here, collaboration, inclusivity and shared purpose empowers you to grow your passion, build a rewarding career and contribute to something bigger—helping shape a better energy future for all. Primary Purpose The role conducts internal audits of IT systems with an emphasis on cybersecurity. The position executes testing primarily of cybersecurity controls in IT and operational technology audits, strengthening critical infrastructure cybersecurity. It applies experience in audit documentation and techniques and a passion for cybersecurity excellence to effectively obtain relevant evidence, perform testing, and communicate issues and improvement recommendations in reports. It recommends practical adjustments to test steps, communicate routine issues to stakeholders, and contribute to reporting, as well as executes a broad range of testing and analysis for information systems audits. ### Duties and Responsibilities Performs control testing for application, technology, and operations processes and evaluates whether evidence meets defined criteria. Analyzes privileged access, security configuration hardening, logging and other cybersecurity control artifacts to identify exceptions and potential impact. Summarizes testing results and drafts preliminary observations that link criteria, condition, cause, and effect. Coordinates with technology teams to obtain extracts or configuration exports required for sampling and analysis. Participates in entrance and exit meetings, explaining straightforward procedures and conclusions. Contributes to follow‑up reviews by confirming remediation activities and gathering validation evidence. Performs other duties as assigned. ## Qualifications ### Education Typically requires a 4-year degree in a relevant field, or equivalent combination of relevant education and experience. ### Experience Typically requires 2 years of related experience. Must reside in Southern California or be willing to relocate upon hire. ### Skills and Abilities Clear and Professional Verbal and Written Communication - Proficiency in clearly requesting specific evidence relevant for cybersecurity control testing both written and verbally, interpreting that evidence, and documenting and sharing the outcome of testing. ### Teamwork and Client Service - Clear communication and positive attitude towards teamwork approach to auditing. Understanding and commitment to client service standards of providing value and performing efficient, relevant, timely, courteous audits with practical and reasonable recommendations for improvement aligned with prioritized threat mitigation guidance. ### Continuous Learning - Engagement with continuous cybersecurity learning as it relates to protecting enterprise IT environments and OT, including pursuing cybersecurity and technology certification(s). Interest in learning about internal auditing profession and IIA Global Internal Audit Standards. ### Risk Assessment Techniques - Expertise in identifying and assessing risks associated with information systems, and developing strategies to mitigate these risks. ### Information Security Standards - Understanding of industry standards and frameworks such as ISO 27001, NIST, and COBIT for evaluating and improving information security practices. ### Network Security Assessment - Ability to evaluate and assess network security controls, identifying vulnerabilities and recommending improvements to protect information assets. ### Cybersecurity Fundamentals - Knowledge of cybersecurity principles and practices to assess the effectiveness of security measures and protect against digital threats. ### System and Application Controls - Expertise in evaluating system and application controls to ensure accuracy, reliability, and security of data processing and information flows. ### Report Writing and Documentation - Skill in preparing detailed reports and documentation of fraud investigations and prevention activities for stakeholders. ### Continuous Monitoring Tools - Proficiency in implementing and utilizing continuous monitoring tools to track system performance and detect potential security breaches in real time. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Jul 11, 2026 - Last checked: Oct 18, 2026 - Listed for: 99 days - Location: San Diego, California, United States - Employment type: Full-time[Apply on Sempra’s careers site →](https://myjobs.adp.com/sempra/cx/job-details?reqId=5001202983706) ## More jobs at Sempra ### [Cybersecurity Awareness Associate I](https://jobs.opennash.com/companies/sempra/jobs/e51c58df654743ff2ec0/) San Diego, California, United States ### [Enterprise Security Systems, Senior Engineer II](https://jobs.opennash.com/companies/sempra/jobs/3909e2b9e934b55c8f6e/) San Diego, California, United States ### [Accounting Policy & Research Lead](https://jobs.opennash.com/companies/sempra/jobs/9793a14cb898de53fab9/) San Diego, California, United States ### [Compensation and Benefits Senior I](https://jobs.opennash.com/companies/sempra/jobs/8d9b5e0134e2e7c286a7/) San Diego, California, United States ### [Electric Transmission Asset Planning & Operations Engineering Senior I/Senior II](https://jobs.opennash.com/companies/sempra/jobs/c3de84e0c88f54012dac/) San Diego, California, United States ## Similar jobs at other companies ### [Internal Audit Executive Director – Global Audit Lead, Cybersecurity, Information Security & Cyber Resilience](https://jobs.opennash.com/companies/morgan-stanley/jobs/bd2c383bffd91cb63491/) Morgan Stanley · New York, United States of America ### [Sr Manager-Corporate Audit (Supply Chain Audit)](https://jobs.opennash.com/companies/lowes/jobs/bc5138004811926b7e5b/) Lowe's · Mooresville, NC ### [Senior Audit Manager - Enterprise-wide Risk Management (ERM) and Governance Audit](https://jobs.opennash.com/companies/hsbc-holdings/jobs/b14b96413027bf444b24/) HSBC Holdings · Buffalo, New York, United States ### [Sr. Cybersecurity Specialist](https://jobs.opennash.com/companies/loews/jobs/5eb1cc70fbea0c4f6d21/) Loews · Atlanta, GA ### [Senior Cybersecurity Specialist](https://jobs.opennash.com/companies/ferrovial/jobs/f30f61532fe3ba6ae213/) Ferrovial · Austin, TX OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)