The Engineer II – Third-Party Cyber Risk Management role at GEICO is part of the Trustworthy Engineering organization, focusing on managing third-party cyber risks. This position involves executing risk assessments, maintaining third-party records, and ensuring secure data-sharing practices. The role supports the broader third-party cyber risk program by collaborating with various stakeholders and continuously improving assessment methodologies. The ideal candidate will have a proactive approach to problem-solving and a strong desire to grow their technical expertise.

• 1-2+ years of experience in cybersecurity, IT risk, or third-party/vendor risk management
• Experience conducting risk or security assessments in a cybersecurity context
• Experience working with GRC, TPCRM, or workflow platforms to execute or track assessments
• Strong analytical and problem-solving skills
• Strong written and verbal communication skills
• A bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent education or work experience

• Execute third-party security assessments and reassessments in industry-recognized tools
• Prioritize and work through the inventory of third parties missing required security assessments
• Reconcile third-party records across risk assessment tools and other enterprise systems
• Support centralized tracking of third-party security issues by maintaining issue records
• Contribute to quarterly and executive-level reporting on assessment metrics
• Collaborate with various stakeholders to gather information needed for assessments
• Conduct root-cause analysis on data-quality issues in third-party records
• Actively seek and apply feedback from teammates and senior engineers