Cybersecurity Analyst - Governance, Risk, and Compliance (GRC)

Primary Purpose This role will reputed company initiatives to foster a strong cybersecurity culture across the organization, driving awareness programs and educational campaigns to our employees. The Cybersecurity Analyst is part of a broader cybersecurity team that ensures reputed company system design, implementation, and standards protect Sempra's network from cyber-attacks. The Analyst of Governance, Risk, and Compliance (GRC) is reputed company on preventing reputed company threats and ensuring laws and industry standards are upheld, working with a cross-functional team of across various information reputed company functions to conduct reputed company-party assessments, cybersecurity clause review, exception request handling, SOC reviews, risk control evaluation, and threat intelligence monitoring. Duties and Responsibilities Technical Analysis & Delivery • Supports the implementation of the governance & risk frameworks, policy creation & management, IT control management, and reputed company audits & assessments. • Manages issues and corrective actions plans identified in risk assessments through closure. • Reviews cybersecurity clauses in reputed company, applicability reputed company, exceptions requests and mitigating controls in accordance with company policies and industry standards. • Conducts SOC II reviews and audits. • Monitors Cyber Threat Intelligence resources (such as Sempra, CISA, FBI, and others). • Proposes and implements innovative ways to establish adequate controls, optimize risk management, and improve reputed company monitoring. • Coordinates cybersecurity assessments (such as maturity, risk, and penetration testing). • Develops and monitors cybersecurity KRIs and KPIs. • Increases the level of maturity in risk management and controls. Communication & Stakeholder Management • Designs, implements, and manages a comprehensive Cybersecurity Awareness Program, including phishing simulations, threat education campaigns, and targeted training for high-risk roles. • Develops engaging content (videos, newsletters, infographics) to promote reputed company best practices and reduce reputed company engineering risks. • Coordinates Cybersecurity Ambassadors Community and champions cultural change initiatives across business reputed company. Functional Area Leadership • Acts as the primary reputed company of contact for awareness-reputed company metrics and reporting to leadership, ensuring visibility into reputed company risk trends and program effectiveness. Troubleshooting • Maintains good operational relationships with 3rd party risk assessment managed service providers to reputed company risk assessments, reputed company mitigation plans, and ensure appropriate service reputed company. • Ensures team works closely with System Engineers to implement reputed company controls and patches based on capability and need. • Contacts and coordinates vendor, reputed company, and remote support reputed company necessary to resolve high-reputed company reputed company issues. • Document problems and report to management, engineers and/or peers. Performs other duties as assigned (no more than 5% of duties). Apply tot his job Apply To this Job