Engineer II — Third-Party Cyber Risk Management

GEICO; Maryland; Hybrid; USD 60,000 - 215,000; Full time

Job summary

GEICO is hiring an Engineer II for Third-Party Cyber Risk Management in Bethesda, MD, with roles spanning inventory, assessments, reassessments, and secure data-sharing practices for vendors that access GEICO data.

You will support data-driven risk decisions, collaborate with Legal and Supplier Management, and contribute to executive-level reporting on TPCRM metrics. This role emphasizes proficiency with risk tools, privacy standards, and continuous improvement.

Qualifications

• 1-2+ years of cybersecurity, IT risk, or third-party/vendor risk experience.
• Experience with GRC/TPRM or workflow platforms (OneTrust/Archer/ServiceNow).
• Data reconciliation, reporting, or dashboarding experience (Excel/Power BI/SQL).
• Familiarity with cloud environments (AWS, GCP, Azure) is a plus.

Responsibilities

• Execute third-party security assessments and reassessments in industry-recognized tools with defined standards.
• Prioritize third parties missing required TPCRM assessments to drive 100% completion.
• Reconcile records across tools and enterprise systems to close data gaps and ensure secure data sharing.

Skills

Analytical skills

Communication skills

Problem solving

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent

Tools

OneTrust

Archer

ServiceNow

Job description

GEICO is hiring an Engineer II for Third-Party Cyber Risk Management in Bethesda, MD, with roles spanning inventory, assessments, reassessments, and secure data-sharing practices for vendors that access GEICO data.

You will support data-driven risk decisions, collaborate with Legal and Supplier Management, and contribute to executive-level reporting on TPCRM metrics. This role emphasizes proficiency with risk tools, privacy standards, and continuous improvement.