Remote-First Security Risk & Third-Party Lead

Affirm, Inc.; Halifax; Remote; CAD 128.000 - 188.000; Vollzeit

Benefits dieser Stelle

Health coverage

Tech stipends

Flexible time off

ESPP

Zusammenfassung

Affim seeks a Senior Security Risk Manager for a remote-first Canada-wide role. You will lead third-party risk programs, conduct due diligence for cross-border vendors, and partner with Legal, IT, and Compliance to scale governance and automation.

The position emphasizes cross-functional collaboration, cloud security oversight, and data protection in line with NIST/ISO controls. Remote work is supported with flexible scheduling and competitive compensation.

Qualifikationen

• 5+ years in information security, risk management or related roles.
• Experience performing security due diligence on M&A targets or multi-country risk assessments.
• Hands-on with agentic coding tools and Python; able to build automations.
• Familiarity with cloud environments (AWS/GCP/Azure) and related security controls.
• Excellent written and verbal communications.
• Knowledge of ISO, NIST, PCI and related security frameworks.

Aufgaben

• Lead and mature Affim's Security Third Party Program with processes and workflows.
• Own pre-launch security due diligence for third parties across international markets.
• Support M&A security due diligence and assess target's security program.
• Lead post-close integration of acquired vendors into the program.
• Design and operate workflow integrations across ticketing, GRC, and IAM tools.
• Develop dashboards and reporting to improve visibility into risk trends.

Kenntnisse

Security risk management

M&A due diligence

Python scripting

Cloud security (AWS/GCP)

Regulatory frameworks (NIST/ISO/SOC)

Cross-functional collaboration

Ausbildung

BA or BS in Information Security or related field

Tools

Cursor

Claude Code

Copilot

Jobbeschreibung

Affim seeks a Senior Security Risk Manager for a remote-first Canada-wide role. You will lead third-party risk programs, conduct due diligence for cross-border vendors, and partner with Legal, IT, and Compliance to scale governance and automation.

The position emphasizes cross-functional collaboration, cloud security oversight, and data protection in line with NIST/ISO controls. Remote work is supported with flexible scheduling and competitive compensation.