Remote Security Risk Engineer – TPRM & Automation

Affirm; Toronto; Remote; CAD 101,000 - 151,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP - Employee stock purchase plan

Job summary

Affirm is seeking a Security Risk Management Specialist to evaluate third-party risk and governance challenges across the Security Third Party Program. You will apply security policy to vendor decisions and ship automation with Python, Cursor, Claude, and other agentic coding platforms to replace manual GRC work with scalable workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and help mature Affirm's Security Risk Management from

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Experience with agentic coding tools and Python scripting.
• Familiarity with cloud environments (AWS, GCP, Azure) and cloud security concepts.
• Knowledge of frameworks such as NIST, ISO 27001, SOC 2, PCI DSS.
• Able to communicate security concepts to diverse audiences.
• Professional certifications such as CISSP, CISM, CISA, or CRISC preferred.

Responsibilities

• Conduct third-party security assessments and document risk findings for the TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python, low-code platforms, and agentic coding tools.
• Configure integrations across ticketing, GRC, and vendor management platforms for repeatable workflows.
• Collaborate with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and actions.
• Develop dashboards, metrics, and reports to provide visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature security governance.

Skills

Information Security

Risk Management

Compliance

Communication

Cloud security concepts

Python scripting

Education

BA/BS in a relevant field

CISSP or equivalent

CISM

CISA

CRISC

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is seeking a Security Risk Management Specialist to evaluate third-party risk and governance challenges across the Security Third Party Program. You will apply security policy to vendor decisions and ship automation with Python, Cursor, Claude, and other agentic coding platforms to replace manual GRC work with scalable workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and help mature Affirm's Security Risk Management from