Third-Party Cyber Risk Management - Engineer II

Why Join GEICO? At GEICO, you’ll find a rewarding career where ambitions are met with endless possibilities. The company honors its iconic brand by offering quality coverage to millions of customers, innovating relentlessly, and making a real impact on local communities nationwide. As part of the Berkshire Hathaway family, GEICO strives to make employees feel valued, supported, and proud, embodied in the GEICO Pledge: Great Company, Great Culture, Great Rewards, and Great Careers.

About the role

The Engineer II – Third‑Party Cyber Risk Management works within GEICO’s Trustworthy Engineering organization on the Third‑Party Cyber Risk Management (TPCRM) team. The role focuses on executing day‑to‑day third‑party inventory, assessment, reassessment, and data‑sharing risk work that supports GEICO’s third‑party cyber risk program.

Responsibilities

• Execute third‑party security assessments and reassessments in industry‑recognized tools, following defined standards for accuracy, completeness, and timeliness, with minimal guidance.
• Prioritize and work through the inventory of third parties missing required TPCRM security assessments to achieve 100 % completion of outstanding reviews.
• Implement defined risk‑assessment tool configuration items (inventory attributes, workflow steps, reporting fields) in support of the broader TPCRM architecture.
• Reconcile third‑party records across risk‑assessment tools and enterprise systems, close data gaps, and validate secure data‑sharing methods.
• Support centralized tracking of third‑party security issues by maintaining issue records, monitoring remediation status against SLAs, and escalating gaps as needed.
• Apply AI/automation (e.g., AI‑assisted data classification, decisioning logic, reporting) to streamline TPCRM workflows such as intake routing, low‑risk auto‑approvals, and dashboard generation.
• Contribute to quarterly and executive‑level reporting on assessment, reassessment, and issue‑management metrics.
• Collaborate with Supplier Management, Legal, Data Protection Engineering, and business stakeholders to gather information needed for assessments and to close data‑sharing gaps.
• Continuously build proficiency with risk‑assessment tools, third‑party risk frameworks, and assessment methodologies; seek mentorship from senior engineers.
• Conduct root‑cause analysis on data‑quality issues or workflow defects and implement fixes under senior guidance.
• Support the team’s roadmap by executing inventory, assessment, and reassessment work that enables advanced capabilities such as risk‑based intake and continuous risk assessment.
• Actively seek and apply feedback, share knowledge, and assist teammates in overcoming obstacles.

Qualifications

• 1‑2+ years of experience in cybersecurity, IT risk, or third‑party/vendor risk management.
• Experience conducting risk or security assessments, or supporting reassessment/renewal processes.
• Experience with GRC, TPCRM, or workflow platforms (e.g., Archer, ServiceNow, OneTrust) to execute or track assessments, issues, or records.
• Proven ability to reconcile data across multiple systems and resolve data‑quality gaps.
• Working knowledge of cybersecurity and data‑privacy regulations and standards relevant to third‑party risk (e.g., NYDFS, NIST CSF).
• Familiarity with data‑security and third‑party risk frameworks such as ISO 27001, NIST, and CIS.
• Strong analytical, problem‑solving, written, and verbal communication skills.
• Proactive, detail‑oriented approach to high‑volume, deadline‑driven work; willingness to seek mentorship and feedback.
• One or more of the following certifications are highly desired: CompTIA Security+ (Sec+), CompTIA Cybersecurity Analyst+ (CYSA+).
• One or more of the following certifications are highly encouraged: CISSP, CISM, CRISC, Certified Third‑Party Risk Professional (CTPRP).
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent education/experience.
• Experience with data‑reconciliation, reporting, or dashboarding tools (e.g., Excel, Power BI, SQL) – preferred.
• Familiarity with cloud environments (AWS, GCP, or Azure) – a plus.

Benefits

• Great Company – innovative, integrity‑driven environment protecting customers.
• Great Careers – personalized development programs, mentorship, and certification assistance.
• Great Culture – inclusive, collaborative culture rooted in shared success.
• Great Rewards – competitive pay, comprehensive benefits, and flexibility to support well‑being and future.

Pay

Annual salary range: $60,000 – $215,000. The final salary will consider factors such as scope and responsibilities, experience, education, work location, and market considerations. GEICO may sponsor qualified applicants for employment authorization.