Lead, Security Risk & Third-Party Automation

Affirm, Inc.; Phoenix (AZ); On-site; USD 165,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking an experienced security professional to lead its Third Party Risk Management program. You will design, implement, and automate processes that mitigate risk across vendor relationships while partnering with Legal, Procurement, Engineering, IT, and Compliance.

You’ll translate complex security needs into scalable solutions and build dashboards to track risk trends. You will also develop automated tooling and scripts to reduce manual tasks, conduct light threat modeling on

Qualifications

• 5+ years in Information Security or Risk Management
• Hands-on with agentic coding tools and Python
• Familiar with cloud environments and security controls
• Strong written and verbal communication
• Professional security certifications are a plus

Responsibilities

• Lead and mature Affirm's Security Third Party Program with processes and controls
• Automate GRC tasks using Python, low-code platforms, and agentic tools
• Design workflows across ticketing, GRC, vendor mgmt, and cloud panels
• Partner with Procurement, Legal, Engineering, IT, Compliance, Privacy and business teams
• Translate requirements into scalable program solutions and decisions
• Prototype automation to reduce manual effort and accelerate reviews
• Establish SLAs, metrics and reporting for third-party risk management
• Evaluate third-party security controls and provide leadership with clear recommendations
• Conduct light threat modeling and collaborate with subject matter experts

Skills

Information Security

Risk Management

Python

Agentic coding tools

Cloud platforms

Communication

Education

Bachelor's degree in Information Security, Cyber Security, or Computer Science

Tools

AWS

GCP

Azure

GRC tools

Job description

Affirm is seeking an experienced security professional to lead its Third Party Risk Management program. You will design, implement, and automate processes that mitigate risk across vendor relationships while partnering with Legal, Procurement, Engineering, IT, and Compliance.

You’ll translate complex security needs into scalable solutions and build dashboards to track risk trends. You will also develop automated tooling and scripts to reduce manual tasks, conduct light threat modeling on