Security Risk Management Lead

Tech Stack

Responsibilities

• Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows.
• Build and maintain automation that replaces manual GRC tasks using Python, low code platforms, and agentic coding tools.
• Design and operate workflow orchestration and integrations across various systems like ticketing, GRC platforms, and cloud control planes.
• Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, and business stakeholders to assess and manage security risk across third party relationships.
• Evaluate third party security controls, cloud architectures (AWS/GCP), integration patterns, and risk posture, providing clear recommendations to stakeholders and leadership.

Benefits

• Equity
• Gym Membership
• Health Insurance
• Remote Work

Culture

Requirements