Sempra Infrastructure
Develops, builds, operates and invests in North American energy infrastructure, incl. LNG, power and pipelines.
Lead GRC initiatives, cyber awareness, risk, compliance, and controls across Sempra.
3 days ago
Intermediate (4-7 years)
Full Time
Houston, Texas, United States
Office Full-Time
Company Size
2,000 Employees
Service Specialisms
Energy Infrastructure
Natural Gas
Liquefied Natural Gas (LNG)
Renewable Energy
Power Generation
Pipeline Transportation
Storage Solutions
Sector Specialisms
LNG
Low Carbon Solutions
Energy Networks
Clean Power
Net-zero Solutions
Modernized Energy Networks
Role
Description
governance
risk management
soc audits
threat monitoring
penetration testing
awareness program
This role will lead initiatives to foster a strong cybersecurity culture across the organization, driving awareness programs and educational campaigns to our employees. The Cybersecurity Analyst is part of a broader cybersecurity team that ensures all system design, implementation, and standards protect Sempra's network from cyber‑attacks. The Analyst of Governance, Risk, and Compliance (GRC) focuses on preventing security threats and ensuring laws and industry standards are upheld, working with a cross‑functional team to conduct third‑party assessments, cybersecurity clause review, exception request handling, SOC reviews, risk control evaluation, and threat intelligence monitoring.
- Support implementation of governance and risk frameworks, policy creation and management, IT control management, and security audits and assessments
- Manage issues and corrective action plans identified in risk assessments through closure
- Review cybersecurity clauses in contracts, applicability criteria, exception requests and mitigating controls per company policies and industry standards
- Conduct SOC II reviews and audits
- Monitor cyber threat intelligence resources such as Sempra, CISA, FBI, and others
- Propose and implement innovative controls, optimize risk management, and improve continuous monitoring
- Coordinate cybersecurity assessments including maturity, risk, and penetration testing
- Develop and monitor cybersecurity KRIs and KPIs
- Increase maturity level in risk management and controls
- Design, implement, and manage a comprehensive Cybersecurity Awareness Program with phishing simulations, threat education campaigns, and targeted training for high‑risk roles
- Develop engaging content (videos, newsletters, infographics) to promote security best practices and reduce social engineering risks
- Coordinate a Cybersecurity Ambassadors Community and champion cultural change initiatives across business units
- Act as primary point of contact for awareness‑related metrics and reporting to leadership, ensuring visibility into human risk trends and program effectiveness
- Maintain operational relationships with third‑party risk assessment service providers to perform assessments, develop mitigation plans, and ensure appropriate service levels
- Ensure team works closely with System Engineers to implement security controls and patches based on capability and need
- Contact and coordinate vendors, carriers, and remote support when necessary to resolve high‑impact security issues
- Document problems and report to management, engineers, and peers
Requirements
bachelor's
4+ years
grc tools
cissp
crisc
gdpr
- Bachelor's degree in Computer Science, Information Technology, or equivalent relevant work experience
- 4+ years of experience in information security, cyber security, or related roles
- 2+ years of experience managing governance, risk, and compliance in a complex IT environment
- Bilingual in Spanish/English is a plus
- Proven experience designing and delivering cybersecurity awareness programs, including phishing simulations and behavioral risk reduction strategies
- Strong communication and content development skills to engage non‑technical audiences effectively
- Knowledge of adult learning principles and experience leveraging e‑learning platforms or gamified training tools
- Strong understanding of security contract management and legal requirements
- Hands‑on experience with enterprise GRC tools (e.g., ServiceNow, Archer)
- Ability to implement global regulatory requirements for data security and privacy (e.g., GDPR, CCPA, CRPA)
- Understanding of relevant cybersecurity regulations and agencies pertinent to utility environments
- General understanding of cybersecurity operations such as incident response, security monitoring, threat and vulnerability management, and SOC services
- General knowledge of OT network infrastructure, SCADA/DCS systems, data/communication systems, and management systems
- General knowledge of security software architecture, programming concepts, and integration into the SDLC
- Ability to manage a diverse technical workforce across multiple locations and to coach personnel
- Personal drive and energy to achieve superior results individually and through others
- Standard certifications in information security (CISSP, CISM, CISA, or equivalent)
- Technical certifications related to GRC (e.g., ISACA CRISC)
Benefits
Information not given or found
Training + Development
Information not given or found
Interview process
Information not given or found
Visa Sponsorship
Information not given or found
Security clearance
Information not given or found
Company
Overview
1,600 MW
Power Generation
Includes over 1,600 MW of power generation capacity, with 1,044 MW from renewable sources in Mexico.
320 MW
Wind Project
Launched the 320 MW Cimarron wind project as part of a 580 MW cross-border renewables complex.
$26B
Company Valuation
Valued at $26 billion after a $1.73 billion stake sale in 2022, financially backed by KKR and ADIA.
- Born in 2021 from a merger of Sempra LNG and IEnova, it set out to shape North America’s energy backbone.
- It plans & operates major LNG export terminals on both Pacific and Gulf coasts, such as Port Arthur and Energia Costa Azul.
- Through its low‑carbon arm it launched the 320 MW Cimarron wind project, bundled into a 580 MW cross‑border renewables complex.
- It secures green hydrogen & ammonia development deals, such as the US Gulf/West Coast framework with Avangrid.
- Typical projects mix mega‑scale LNG export, pipeline builds, wind farms and low‑carbon facilities under one umbrella.
- It stands out by connecting LNG and renewables, pioneering cross‑border energy links and next‑gen clean fuel ventures.
Culture + Values
- Do the Right Thing
- Champion People
- Shape the Future
- Safety: They put the health, safety, and security of their workforce, customers, and communities at the center of everything they do.
- People and Culture: They care about people and foster a culture that drives high performance.
- Customer Focus: Customers choose them because of their focus on meeting customer needs, distinctive and cost-effective offers, proven development capability, and dependability.
- Excellence: They commit to excellence, producing high-quality, reliable outcomes to meet stakeholder objectives.
- Partnerships: They build long-term relationships and strategic alliances to fulfill their mission.
- Capital Efficiency: They prudently manage capital to make informed investments that fulfill their strategic objectives and meet shareholder expectations.
- Financial Performance, Risk & Compliance: They create shareholder value by producing sustainable, clear, predictable earnings and strong, risk-adjusted returns on capital.
- Technology and Innovation: They embrace innovation and leverage technology aimed at achieving their business goals.
- Sustainability: They create sustainable value through world-class safety, championing people, resilient operations, and enabling the energy transition to a lower-carbon future.
Environment + Sustainability
Net‑zero by 2050
Emissions Target
Aim to achieve net-zero emissions across all scopes by 2050.
20% intensity reduction
GHG Target
Targets a 20% reduction in GHG emissions intensity by 2025 compared to 2020 levels.
28% emission drop
2021 Performance
Achieved a 28% reduction in GHG emissions intensity in 2021 compared to the 2020 baseline.
- Joined Carbon Neutral Coalition in 2022 to support policy for CCUS enabling net‑zero by 2050
- Developing low‑carbon solutions: carbon capture & sequestration, hydrogen, ammonia, renewable natural gas
- Partnering on e‑natural gas project (carbon‑neutral LNG supply chain) announced August 30 2023
- Part of Sempra 3Ds framework (Decarbonization, Diversification, Digitalization) with interim goals through 2025, 2030 and 2050
- Expect suppliers to track environmental metrics: reduce GHG, restore land, minimize energy/water use, reduce waste, reuse/recycle materials
Inclusion & Diversity
Top 10
Recognized as a Great Place to Work
The company was named in the top 10 of Mexico’s Great Place to Work for companies with 500–5,000 employees.
Top 100
Ranked in Equidad MX Program
Achieved a top 100 rating from Human Rights Campaign’s Equidad MX Global Workplace Equity Program.
- Program GROW focuses on growing responsibilities and opportunities for women’s career development.
- A Local Diversity & Inclusion Council, an employee-led group, promotes a respectful and inclusive workplace.
- Launched the inaugural Diversity & Inclusion Week in Mexico with panels, dialogues, and visits.
- Belief in the value of diverse perspectives and backgrounds to elevate performance.
- A women’s network inspiring future energy workforce and leaders, highlighted in March 2024.
Articles
External apply — opens employer website