Third-Party Cyber Risk Management - Engineer II

## Third-Party Cyber Risk Management - Engineer IIApply:
Bethesda, MD:
Palo Alto, CA:
Dallas, TX:
Seattle, WA:
Full time:
Posted Today:
R0065688
** Why Join GEICO?
** At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities.

Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide.

Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge:
Great Company, Great Culture, Great Rewards, and Great Careers.
** GEICO’s
** Cybersecurity organization has an exciting opportunity for an accomplished
** Engineer II – Third-Party Cyber Risk Management**. This individual will play a key role within GEICO’s Trustworthy Engineering organization, on the Third-Party Cyber Risk Management (TPCRM) team, with a focus on executing the day-to-day third-party inventory, assessment, reassessment, and data-sharing risk work that supports GEICO’s third-party cyber risk program.
** Position

Description:

** Our Engineer II – Third-Party Cyber Risk Management is responsible for assisting the TPCRM team’s efforts to inventory GEICO’s third-party ecosystem, execute risk-based security assessments and reassessments, and enforce secure data-sharing practices for third parties that access GEICO data. This includes maintaining and reconciling third-party records in industry-recognized risk assessment tools and related systems, working through the current backlog of third parties missing a required security assessment, supporting the team’s quarterly commitment to complete all reassessments due, and helping monitor the effectiveness of implemented controls, under the guidance of senior engineers on the team.
** Position Responsibilities
** As an Engineer II, you will:
* Execute third-party security assessments and reassessments in industry-recognized tools, following defined standards for accuracy, completeness, and timeliness, with minimal guidance from senior engineers
* Prioritize and work through the inventory of third parties identified as missing a required TPCRM security assessment, helping the team reach 100% completion of outstanding reviews Implement defined industry-recognized risk assessment tools configuration items, including inventory attributes, assessment workflow steps, and reporting fields, in support of the broader TPCRM architecture set by senior engineers
* Reconcile third-party records across industry-recognized risk assessment tools and other enterprise systems to identify and close data gaps, and validate that data is shared with third parties using approved, secure data-sharing methods
* Support centralized tracking of third-party security issues by maintaining issue records, monitoring remediation status against SLAs, and escalating gaps to senior team members as needed
** Interest or experience in applying AI/automation** (e.g., AI-assisted data classification, decisioning logic, or reporting) to streamline TPCRM workflows such as intake routing, low-risk auto-approvals, and dashboard generation, reducing manual effort across the assessment and reassessment process
* Contribute to quarterly and executive-level reporting on assessment, reassessment, and issue-management metrics, helping ensure the underlying data is accurate and current
* Collaborate with Supplier Management, Legal, Data Protection Engineering, and business stakeholders to gather the information needed…