Remote Security Risk Architect TPRM & Automation

Affirm; Madison (WI); On-site; USD 115,000 - 165,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking a Security Risk Management Engineer to evaluate, build, and refine solutions to third-party risk and security governance challenges within the Security Third Party Program. You will apply security policy to vendor decisions and ship automation using Python, Cursor, Claude, and other agentic coding platforms to scale GRC work into code-defined workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy, develop dashboards, and help mature

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Familiar with agentic coding tools (Cursor, Claude Code, Copilot) and Python scripting.
• Familiar with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Knowledge of security frameworks (NIST, ISO 27001, SOC 2, PCI DSS).
• Strong written and verbal communication; ability to translate security risk concepts for technical and non-technical audiences.
• Working toward professional certification (CISSP, CISM, CISA, CRISC) or equivalent experience; BA/BS preferred.

Responsibilities

• Conduct third-party security assessments and document findings.
• Build and maintain automation to reduce manual GRC workloads using Python and low-code tools.
• Configure integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance and Privacy for risk reviews and actions.
• Develop dashboards and reporting to give stakeholders visibility into third-party risk posture.
• Contribute to process improvements and program documentation.

Skills

InfoSec experience

Agentic coding tools

Python scripting

Cloud security concepts

Security frameworks (NIST ISO 27001SOC

Communication

Certifications (CISSP CISM CISA CRISC)

Education

BA/BS in relevant field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is seeking a Security Risk Management Engineer to evaluate, build, and refine solutions to third-party risk and security governance challenges within the Security Third Party Program. You will apply security policy to vendor decisions and ship automation using Python, Cursor, Claude, and other agentic coding platforms to scale GRC work into code-defined workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy, develop dashboards, and help mature