This job has closed.

GEICO · 3 months ago

Senior Cybersecurity Engineer - Cyber Governance (HYBRID)

Austin, TX

Full-time

Hybrid

Mid, Senior Level

$80K/yr - $215K/yr

5+ years exp

GEICO is a leading insurance company that values innovation and customer service. The Senior Cybersecurity Engineer will advance GEICO’s cybersecurity governance and compliance program by designing and implementing policies, ensuring audit readiness, and providing expert guidance on compliance processes across various cybersecurity domains.

Auto InsuranceFinancial ServicesGovernmentInsuranceInternetMobile

No H1B

Responsibilities

Assist in maturing the cybersecurity governance program, ensuring adherence to corporate policies and standards, regulatory requirements, and industry frameworks

Drive NY DFS compliance and NIST CSF Maturity Programs

Develop and maintain control framework alignment

Support staff engineers and policy owners to develop, review, and update policies and standards to align with evolving requirements and best practices

Partner with internal teams to drive policy lifecycle management, controls mapping and ensure alignment with enterprise risk management objectives

Conduct assessment against AI standards (e.g ISO/IEC 42001:2023, 23894, NIST AI 600-1, NIST AI RMF)

Assess impact of emerging threats on compliance and coordinate threat-driven policy updates

Ensure controls are mapped across frameworks in the automated governance solution and drive compliance automation validation in partnership with the platform team. Assess compliance gaps and partner and guide on remediation plans

Coordinate evidence refresh cycle for all applicable frameworks

Validate evidence submissions, ensure timely updates, and document exceptions or remediation plans

Maintain centralized knowledge base and repositories (e.g., GRC tools, SharePoint, Confluence) to streamline evidence collection and control mapping

Support internal and external audits by providing accurate, complete evidence and narrative explanations

Apply a risk-based approach to control evaluation, prioritization, and remediation

Partner with stakeholders to address compliance gaps and track progress toward closure

Provide subject matter expertise on regulatory requirements, compliance trends, and security frameworks

Support continuous improvement through automation, metrics, and reporting dashboards

Partner with control owners, internal controls team, and leadership to ensure alignment across business and technical functions

Provide training and guidance to evidence owners on requirements, documentation standards, and deadlines

Communicate clearly with technical and non-technical stakeholders to ensure understanding of compliance obligations

Mentor and guide more junior engineers on the team

Design and implement cyber governance metrics, KPIs, and executive dashboards to measure security posture, policy compliance, and control effectiveness

Qualification

Cybersecurity GovernanceCompliance FrameworksAudit ReadinessEvidence ManagementGRC ToolsCloud Security ComplianceRisk ManagementCommunication SkillsProblem-Solving SkillsCollaborationLeadershipAttention to Detail

Required

5+ years of extensive experience in cybersecurity governance, risk and compliance (GRC) roles with demonstrated experience in one or more compliance frameworks such as NYDFS 500, PCI DSS, NIST CSF, ISO 27001

Proven experience supporting audit readiness and evidence collection for internal, external, or regulatory audits

Strong organizational skills with the ability to prioritize tasks effectively, maintain exceptional attention to details, and consistently deliver results on or before deadlines

Proven experience in fostering cross-functional partnerships and serving as a trusted advisor to evidence owners by providing guidance, support and expertise

Experience using GRC or evidence management tools (e.g., ServiceNow GRC, Archer, Drata, Vanta, SharePoint)

Excellent communication and problem-solving skills with the ability to influence and collaborate across diverse teams

Ability to manage multiple work tracks simultaneously and prioritize tasks based on urgency and impact

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline; or equivalent work experience

Preferred

Experience in financial services, insurance, or other regulated industries

Knowledge of cloud security compliance across AWS, Azure, and GCP environments

Familiarity with continuous control monitoring and automation practices

Certifications: CISA – Certified Information Systems Auditor

Certifications: CISM – Certified Information Security Manager

Certifications: CRISC – Certified in Risk and Information Systems Control

Certifications: CISSP – Certified Information Systems Security Professional

Benefits

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.

Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.

Access to additional benefits like mental healthcare as well as fertility and adoption assistance.

Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.

Company

GEICO

Glassdoor2.7

GEICO, Government Employees Insurance Company, has been providing affordable auto insurance since 1936. It is a sub-organization of Berkshire Hathaway.

Founded in 1936

Chase, Maryland, USA

10001+ employees