Remote Security Risk Lead – Third-Party & M&A

Affirm, Inc.; Calgary; Remote; CAD 128,000 - 188,000; Full time

Benefits offered by this job

100% medical coverage

Monthly stipends

Generous time off

ESPP stock purchase plan

Job summary

Affim, a remote-first company, seeks a seasoned Security Risk Manager to lead third-party risk across global markets. You will design controls, perform due diligence on vendors, and partner with Procurement, Legal and Engineering to reduce risk while enabling secure growth.

The role requires hands-on experience with cloud security, M&A security assessments, and the ability to translate complex requirements into scalable programs.

Qualifications

• 5+ years in Information Security or Risk Management.
• Security due diligence on M&A targets across multiple countries.
• Hands-on with agentic coding tools and Python.
• Familiar with AWS/GCP/Azure cloud security practices.
• Bachelor’s degree in Information Security or related field.
• Strong communication and stakeholder management.

Responsibilities

• Lead and mature third-party security program globally.
• Own pre-launch due diligence for international markets and vendors.
• Support M&A security due diligence with risk ratings and recommendations.
• Drive post-close vendor integration and remediation tracking.
• Design workflow orchestration across ticketing, GRC, and IAM tools.
• Develop dashboards to reveal risk trends and program performance.

Skills

InfoSec

Risk Mgmt

M&A due diligence

Python scripting

Cloud security

Education

BA/BS in InfoSec or CS

Tools

Cursor

Claude Code

Copilot

Job description

Affim, a remote-first company, seeks a seasoned Security Risk Manager to lead third-party risk across global markets. You will design controls, perform due diligence on vendors, and partner with Procurement, Legal and Engineering to reduce risk while enabling secure growth.

The role requires hands-on experience with cloud security, M&A security assessments, and the ability to translate complex requirements into scalable programs.