Senior Staff Engineer, Cybersecurity Compliance & Assurance

**Why Join GEICO?** At GEICO, we offer a rewarding career where your ambitions are met with endless possibilities. Every day we honor our iconic brand by offering quality coverage to millions of customers and being there when they need us most. We thrive on relentless innovation to exceed our customers' expectations while making a real impact on local communities nationwide. Founded in 1936, GEICO is a member of the Berkshire Hathaway family of companies and one of the largest auto insurers in the United States. When you join our company, we want you to feel valued, supported, and proud to work here. That's why we offer the GEICO Pledge: Great Company, Great Culture, Great Rewards, and Great Careers. GEICO is seeking an experienced Senior Staff Engineer, Cybersecurity Compliance \& Assurance, to lead the design, implementation, and continuous improvement of its cybersecurity compliance and assurance program, ensuring sustained compliance with NY DFS, PCI DSS, CCPA/CPRA, NIST CSF, SOX, HIPAA, and other cyber regulatory obligations. This role will drive audit readiness, compliance by design, automated evidence collection, continuous control monitoring, and risk\-based assessments across GEICO’s security domains. GEICO is transforming cybersecurity through automation and a risk\-based approach. The ideal candidate will have a proven track record of building effective compliance frameworks, driving end\-to\-end compliance, creating actionable metrics, meeting regulatory requirements, and demonstrating strong leadership and collaboration skills. **Key Responsibilities** * Own and mature the enterprise cybersecurity compliance program, ensuring alignment with regulatory, contractual, and business requirements. * Lead cybersecurity compliance initiatives supporting NY DFS, PCI DSS, CCPA/CPRA, NIST CSF, SOX, HIPAA, SOC Type II, ISO 27001 and other applicable regulatory frameworks. * Lead and manage security attestations/certifications supporting SOC 2 Type