TPCRM Engineer II: Elevating Third-Party Cyber Risk

Geico; Palo Alto (CA); Hybrid; USD 60,000 - 215,000; Full time

Job summary

GEICO in Palo Alto is seeking an Engineer II in Third-Party Cyber Risk Management to inventory third-party ecosystems and execute risk assessments across enterprise tools. You will enforce secure data-sharing practices for vendors and assist in closing data gaps under senior guidance.

You will reconcile records across risk platforms, monitor SLAs, and contribute to executive risk reporting. A background in GRC/TPRM and familiarity with ISO/NIST frameworks are highly valued.

Qualifications

• Experience conducting risk or security assessments in cybersecurity, IT risk, or third-party risk contexts.
• Experience working with GRC/TPRM or workflow platforms to track assessments, issues, or records.
• Familiarity with data security standards and third-party risk frameworks (ISO 27001, NIST, CIS).
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Inventory third-party ecosystem and ensure completeness of security assessments.
• Reconcile records across risk tools and enterprise systems to close data gaps.
• Monitor remediation status against SLAs and escalate gaps as needed.
• Contribute to quarterly and executive-level risk reporting and metrics.
• Collaborate with Legal, Supplier Management, and Data Protection teams to close data-sharing gaps.

Skills

Cyber risk assessments

Data reconciliation

GRC/TPRM experience

Strong communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Archer

ServiceNow

Excel

Power BI

SQL

Job description

GEICO in Palo Alto is seeking an Engineer II in Third-Party Cyber Risk Management to inventory third-party ecosystems and execute risk assessments across enterprise tools. You will enforce secure data-sharing practices for vendors and assist in closing data gaps under senior guidance.

You will reconcile records across risk platforms, monitor SLAs, and contribute to executive risk reporting. A background in GRC/TPRM and familiarity with ISO/NIST frameworks are highly valued.