Lead, Third-Party Security Risk & Automation

Affirm, Inc.; Ottawa; Remote; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first compensation structure

Spending Wallets: tech, food, family

Health Benefits

Parental Leave: 18 weeks + transition

Job summary

Affirm, Inc. is seeking a strategic leader to design and mature its Security Third Party Program.

You will own pre-launch security due diligence for international markets, assess vendor risk, and shape policy while shipping scalable automation using Python, Cursor, and Claude. As a subject matter expert, you will partner with Finance, Legal, Engineering, and Privacy teams to drive risk-based decisions, manage complex vendor portfolios, and deliver measurable program improvements across global

Qualifications

• 5+ years of experience in Information Security, Risk Management, Engineering or related roles.
• Experience performing security due diligence on M&A targets across multiple countries.
• Hands-on experience with agentic coding tools and Python.
• Familiarity with cloud environments (AWS, GCP, Azure) and related security controls.
• Excellent written and verbal communications skills.

Responsibilities

• Design, implement, and improve third party security processes and workflows.
• Lead pre-launch security due diligence for new markets and partners.
• Coordinate with Finance, Legal, and Security leadership on M&A security due diligence.
• Develop dashboards and reporting to track risk trends and program performance.
• Drive program operational excellence with repeatable processes and SLAs.

Skills

Security risk management

Threat modeling

Vendor risk assessments

Cross-functional collaboration

Education

BA/BS Information Security

Certifications (CISSP/CISM/CISA)

Tools

Python

Cursor

Claude

Job description

Affirm, Inc. is seeking a strategic leader to design and mature its Security Third Party Program.

You will own pre-launch security due diligence for international markets, assess vendor risk, and shape policy while shipping scalable automation using Python, Cursor, and Claude. As a subject matter expert, you will partner with Finance, Legal, Engineering, and Privacy teams to drive risk-based decisions, manage complex vendor portfolios, and deliver measurable program improvements across global