Information Systems Audit Lead
Listed on 2026-10-20
-
IT/Tech
Information Security & Data Protection, IT Business Analyst, Cybersecurity
At Sempra, a better world begins with better energy—and with people who want to make a difference.
That’swhywe’retackling the biggest challenges facing our industry while building ahigh‑performance culture where you can do your best work. Together, our teams supportnearly 40million consumers across the U.S., strengthening the communities we serve and creating impact that extends far beyond the workplace. Here, collaboration, inclusivity and shared purpose empowers you to grow your passion, build a rewarding career and contribute to something bigger—helping shape a better energy future for all.
Purpose
This position owns complex audit work streams, integrate analytics and technology insights into testing, and influence scope to address significant risks. Mentor team members and contribute to methodology and tooling improvements.
Duties and Responsibilities- Designs risk‑based programs for multi‑system processes, integrating coverage across governance, acquisition and development, operations, and protection of information assets.
- Applies data analysis or tool‑assisted techniques to test large populations and identify outliers efficiently.
- Evaluates the design and operating effectiveness of automated and information technology dependent controls in enterprise applications.
- Assesses third‑party or service provider control reports and determines appropriate additional procedures.
- Leads stakeholder walkthroughs to align on criteria and to confirm end‑to‑end control coverage across platforms.
- Produces clear, concise reporting packages that connect evidence to impact and prioritize remediation.
- Coaches associates and seniors on documentation quality, sampling logic, and evidence sufficiency.
- Recommends improvements to audit templates, analytics scripts, and knowledge assets to reduce cycle time.
- Performs other duties as assigned.
Education
- Typically requires a 4 year degree in a relevant field, or equivalent combination of relevant education and experience.
Experience
- Typically requires 8 years of related experience.
Must reside in Southern California or be willing to relocate upon hire.
Knowledge,
Skills and Abilities
- Ability to design audit approaches for complex or emerging technology risks.
- Ability to evaluate interconnected technology controls across end-to-end processes.
- Ability to exercise significant autonomy while adhering to professional standards.
- Knowledge of complex IT environments, including integrated applications and infrastructure.
- Knowledge of enterprise risk management and IT governance frameworks.
- Skill in communicating complex technical risks to non-technical audiences.
- Skill in influencing stakeholders to remediate technology control gaps.
May consider candidates at a higher level.
Work ScheduleHYBRID:
Work a combination of onsite and remote days each week, typically 4 days per week onsite.
Information Technology
Full Time/Part TimeFull-time
Posting End DateOct 30, 2026
Total Rewards PhilosophyNote:
Sempra strives to ensure that employees are paid equitably and competitively. Starting salaries may vary based on factors such as relevant experience, qualifications, and education.
Sempra offers a competitive total rewards package that goes beyond base salary. This position is eligible for an annual performance-based incentive (bonus) as well as other merit-based recognition.
Company benefits include:
- health and welfare (medical, dental, vision)
- employer contributions to retirement benefits
- life insurance
- paid time off
- tuition reimbursement
- paid parental leave
- employee assistance programs
Pay Range $ - $ / year
Pay TransparencyIn order to support the Fair Compensation Strategy by the US Govt., HR Dept., clients are required to adhere to "Pay Transparency Law"; in the impacted…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).