Engineer II, Third-Party Cyber Risk Management

GEICO; Dallas (TX); On-site; USD 60,000 - 215,000; Full time

Job summary

GEICO is hiring for an Engineer II – Third-Party Cyber Risk Management within the Trustworthy Engineering organization. You will inventory GEICO’s third-party ecosystem, perform risk-based assessments, and enforce secure data-sharing practices.

The role involves collaborating with Legal, Supplier Management, and Data Protection Engineering to close gaps and monitor remediation. The position requires 1–2+ years in cybersecurity or IT risk, familiarity with TPCRM tools

Qualifications

• Experience conducting risk or security assessments in cybersecurity or IT risk contexts.
• Experience with GRC/TPCRM or workflow platforms (e.g., Archer, ServiceNow) to execute or track assessments, issues, or records.
• Data reconciliation across multiple systems and identification of data-quality gaps.
• Familiarity with cybersecurity and data privacy regulations and standards (e.g., NYDFS, NIST).
• Knowledge of data security frameworks (ISO 27001, NIST, CIS).
• Strong analytical and problem-solving skills with a detail-oriented approach.
• Excellent written and verbal communication and collaboration with cross-functional teams.

Responsibilities

• Execute third-party security assessments and reassessments using industry tools with accuracy and timeliness.
• Inventory third-party ecosystem and ensure completion of required security assessments.
• Reconcile third-party records across tools and validation of secure data-sharing methods.
• Support central tracking of security issues and monitor remediation status against SLAs.
• Assist in risk-based intake, reporting, and dashboard generation using AI/automation where applicable.

Skills

Cybersecurity

Risk assessments

GRC tools

Data reconciliation

Communication

Cloud experience

Education

Bachelor’s degree in Computer Science / Information Security

Tools

Archer

ServiceNow

OneTrust

Power BI

SQL

Job description

GEICO is hiring for an Engineer II – Third-Party Cyber Risk Management within the Trustworthy Engineering organization. You will inventory GEICO’s third-party ecosystem, perform risk-based assessments, and enforce secure data-sharing practices.

The role involves collaborating with Legal, Supplier Management, and Data Protection Engineering to close gaps and monitor remediation. The position requires 1–2+ years in cybersecurity or IT risk, familiarity with TPCRM tools