← All roles

Security Risk Management Lead

Affirm· Information Security
Apply on company site
Remote$165k - $225kfull-timePosted 4mo ago

About the role

Security Risk Management Lead at Affirm, remote US. Designs, automates, and scales third-party risk controls and workflows, blending policy with engineering to transform Security Risk Management from compliance-focused to an engineering-driven discipline.

Responsibilities

  • Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows
  • Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.)
  • Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes
  • Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, and business stakeholders to assess and manage security risk across third party relationships
  • Translate ambiguous business and security requirements into practical, scalable program solutions and decision frameworks
  • Identify opportunities to automate manual processes across the program and prototype solutions yourself
  • Drive program operational excellence by establishing repeatable processes, service-level expectations, metrics, and reporting for third party security risk management
  • Evaluate third party security controls, cloud architectures (AWS/GCP), integration patterns, and risk posture, and provide clear recommendations to stakeholders and leadership
  • Conduct light threat models on high risk integrations and partner with Security SMEs for deeper diligence
  • Manage and prioritize a portfolio of complex security risk reviews and initiatives simultaneously
  • Partner with technical teams to implement or optimize systems and tools that support program automation and workflow orchestration
  • Develop dashboards, reporting mechanisms, and program insights (SQL, BI tools, or custom tooling) that improve visibility into risk trends, bottlenecks, and program performance
  • Act as a trusted advisor and SME on third party security risk management
  • Contribute to the broader Security Risk Management strategy by scaling, simplifying, and strengthening governance processes through engineering

Qualifications

  • 5+ years of experience in Information Security, Risk Management, Engineering and/or relevant roles
  • Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and working knowledge of Python
  • Familiarity with cloud environments (AWS, GCP, or Azure) — IAM, logging, common services, and cloud-deployed third party risks and controls
  • Excellent written and verbal communications skills
  • Experience engineering solutions via Python, Claude, Cursor or other agentic coding tooling
  • Experience with industry-based information security & control frameworks (NIST CSF, ISO 2700x, SOC1&2, PCI DSS, NIST-800-53, SANS Top 20, etc.)
  • BA or BS in Information Security, Cyber Security, Computer Science or related field or commensurate experience
  • Attention to detail and experience with security practices and tooling
  • Demonstrated ability to drive projects towards completion
  • Ability to understand and communicate technical issues to non-technical teams
  • Professional certification in Information Security or Risk Management (e.g., CISSP, CISM, CISA, CRISC) is a plus

Skills

Required:Information Security / Risk ManagementPythonAgentic coding tools

Benefits

  • Health coverage at no cost for employees and dependents
  • Monthly stipends for tech setup and health/wellness options
  • Flexible time off and generous holiday calendar
  • Employee stock purchase plan (ESPP)
Last updated Sep 16, 2026. Interested? Apply on the company site.

About Affirm

Pay over time with flexible payment plans and no fees

Buy now pay later without the fees. Flexible payment options with longer plans, lower payments, and no fees. Pay in 4 interest-free or get more time and see your total cost upfront.

Buy now pay laterFinancial servicesPayment plansCredit
Company profileWebsite

More open roles at Affirm