Assistente de Segurança da Informação supporting operational activities in information security at AuditSafe. Engaging in monitoring, documentation, and compliance efforts in cybersecurity.
About the role
- Senior Cybersecurity Engineer enhancing GEICO's cybersecurity governance and compliance program. Leading the design, implementation, and continuous improvement of compliance operations across multiple cybersecurity domains.
Responsibilities
- Assist in maturing the cybersecurity governance program, ensuring adherence to corporate policies and standards, regulatory requirements, and industry frameworks.
- Drive NY DFS compliance and NIST CSF Maturity Programs
- Develop and maintain control framework alignment
- Support staff engineers and policy owners to develop, review, and update policies and standards to align with evolving requirements and best practices.
- Partner with internal teams to drive policy lifecycle management, controls mapping and ensure alignment with enterprise risk management objectives.
- Conduct assessment against AI standards (e.g ISO/IEC 42001:2023, 23894, NIST AI 600-1, NIST AI RMF)
- Assess impact of emerging threats on compliance and coordinate threat-driven policy updates.
- Ensure controls are mapped across frameworks in the automated governance solution and drive compliance automation validation in partnership with the platform team.
- Assess compliance gaps and partner and guide on remediation plans
- Coordinate evidence refresh cycle for all applicable frameworks.
- Validate evidence submissions, ensure timely updates, and document exceptions or remediation plans.
- Maintain centralized knowledge base and repositories (e.g., GRC tools, SharePoint, Confluence) to streamline evidence collection and control mapping.
- Support internal and external audits by providing accurate, complete evidence and narrative explanations.
- Apply a risk-based approach to control evaluation, prioritization, and remediation.
- Partner with stakeholders to address compliance gaps and track progress toward closure.
- Provide subject matter expertise on regulatory requirements, compliance trends, and security frameworks.
- Support continuous improvement through automation, metrics, and reporting dashboards.
- Partner with control owners, internal controls team, and leadership to ensure alignment across business and technical functions.
- Provide training and guidance to evidence owners on requirements, documentation standards, and deadlines.
- Communicate clearly with technical and non-technical stakeholders to ensure understanding of compliance obligations.
- Mentor and guide more junior engineers on the team.
- Design and implement cyber governance metrics, KPIs, and executive dashboards to measure security posture, policy compliance, and control effectiveness.
Requirements
- 5+ years of extensive experience in cybersecurity governance, risk and compliance (GRC) roles with demonstrated experience in one or more compliance frameworks such as NYDFS 500, PCI DSS, NIST CSF, ISO 27001
- Proven experience supporting audit readiness and evidence collection for internal, external, or regulatory audits.
- Strong organizational skills with the ability to prioritize tasks effectively, maintain exceptional attention to details, and consistently deliver results on or before deadlines.
- Proven experience in fostering cross-functional partnerships and serving as a trusted advisor to evidence owners by providing guidance, support and expertise.
- Experience using GRC or evidence management tools (e.g., ServiceNow GRC, Archer, Drata, Vanta, SharePoint).
- Excellent communication and problem-solving skills with the ability to influence and collaborate across diverse teams.
- Ability to manage multiple work tracks simultaneously and prioritize tasks based on urgency and impact.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related discipline; or equivalent work experience.
Benefits
- Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being.
- Financial benefits including market-competitive compensation; a 401K savings plan vested from day one that offers a 6% match; performance and recognition-based incentives; and tuition assistance.
- Access to additional benefits like mental healthcare as well as fertility and adoption assistance.
- Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year.
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Application Security Specialist improving security practices throughout development lifecycle at ClickBus. Collaborating with teams for vulnerability remediation and secure coding guidelines implementation.
Security Architect for Logicalis focusing on networking and security solutions for clients. Engaging with vendors and providing technical documentation and proposals collaboratively.
Técnico de Segurança do Trabalho ensuring safety protocols and risk management at KFC stores in Brazil. Focused on implementing regulatory standards and safety training initiatives.
DevSecOps engineer at Ford ensuring secure software development and compliance with security standards. Collaborating with teams to embed security practices and assess vulnerabilities in software delivery.
Security Officer responsible for ensuring safety and security at the Genesee Brewing Company. Monitoring premises, responding to emergencies, and providing visitor assistance during shifts.
Security Estimator creating estimates and proposals for security projects at LINX. Collaborating with engineering and sales teams for system design and client relationships.
Product Security Architect at Expedia designing secure architecture for services and APIs. Collaborating with teams to guide secure practices and integrate AI - driven solutions.
IT Security Officer overseeing information security for a specific IT sector at Desjardins. Collaborating with cross - sector teams and managing information security risks and vulnerabilities.
Associate, Information Security professional at Santander focusing on Vulnerability Management and network security exposure. Collaborating with teams to enhance security posture and manage technology risks.