Information Systems Audit Lead

Job description

Sempra

Where opportunity powers impact ​ ​At Sempra, a better world begins with better energy—and with people who want to make a difference. That’s why we’re tackling the biggest challenges facing our industry while building ahigh‑performance culture where you can do your best work. Together, our teams support nearly 40 million consumers across the U.S., strengthening the communities we serve and creating impact that extends far beyond the workplace.

Here, collaboration, inclusivity and shared purpose empowers you to grow your passion, build a rewarding career and contribute to something bigger—helping shape a better energy future for all. Primary Purpose This position owns complex audit workstreams, integrate analytics and technology insights into testing, and influence scope to address significant risks. Mentor team members and contribute to methodology and tooling improvements.

Duties and Responsibilities

Designs risk‑based programs for multi‑system processes, integrating coverage across governance, acquisition and development, operations, and protection of information assets. Applies data analysis or tool‑assisted techniques to test large populations and identify outliers efficiently. Evaluates the design and operating effectiveness of automated and information technology dependent controls in enterprise applications. Assesses third‑party or service provider control reports and determines appropriate additional procedures.

Leads stakeholder walkthroughs to align on criteria and to confirm end‑to‑end control coverage across platforms. Produces clear, concise reporting packages that connect evidence to impact and prioritize remediation. Coaches associates and seniors on documentation quality, sampling logic, and evidence sufficiency. Recommends improvements to audit templates, analytics scripts, and knowledge assets to reduce cycle time. Performs other duties as assigned.

Qualifications

Education

Typically requires a 4 year degree in a relevant field, or equivalent combination of relevant education and experience.

Experience

Typically requires 8 years of related experience. Must reside in Southern California or be willing to relocate upon hire. Knowledge, Skills and Abilities Ability to design audit approaches for complex or emerging technology risks. Ability to evaluate interconnected technology controls across end-to-end processes. Ability to exercise significant autonomy while adhering to professional standards. Knowledge of complex IT environments, including integrated applications and infrastructure.

Knowledge of enterprise risk management and IT governance frameworks. Skill in communicating complex technical risks to non-technical audiences. Skill in influencing stakeholders to remediate technology control gaps. May consider candidates at a higher level.