Remote Security Risk Engineer II - TPRM Automation

Affirm; Oshawa; On-site; CAD 101,000 - 151,000; Full time

Benefits offered by this job

100% subsidized medical coverage

Equity rewards

Remote-first company

Monthly stipends for health, wellness,

tech spending

Job summary

Affirm in Canada is seeking a Security Risk Management Specialist to evaluate, build, and refine solutions for third-party risk and security governance across the program. You will automate GRC workflows with Python and agentic coding tools, reducing manual work and increasing scalability.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy; develop dashboards and metrics to reveal third-party risk posture; contribute to process improvements and documentation as

Qualifications

• 3+ years of information security, risk management, or a related field.
• Familiarity with agentic coding tools and Python for scripting/automation.
• Knowledge of cloud environments and common security frameworks (NIST, ISO 27001, SOC 2, PCI DSS).

Responsibilities

• Conduct third-party security assessments and document risk findings.
• Build and maintain automation to reduce manual GRC workflows.
• Configure integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews.
• Develop dashboards and reporting to visualize third-party risk posture.
• Contribute to process improvements and program documentation.

Skills

Python scripting

Agentic coding tools

Cloud security concepts

Security risk management

Communication skills

Education

BA/BS in a relevant field

CISSP/CISM/CISA/CRISC or equivalent

Tools

Cursor

Claude Code

Copilot

Job description

Affirm in Canada is seeking a Security Risk Management Specialist to evaluate, build, and refine solutions for third-party risk and security governance across the program. You will automate GRC workflows with Python and agentic coding tools, reducing manual work and increasing scalability.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy; develop dashboards and metrics to reveal third-party risk posture; contribute to process improvements and documentation as