Remote Security Risk Engineer - Third-Party Automation

Affirm; Austin (TX); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm, a remote-first fintech, is seeking a Security Risk Management professional to evaluate third-party risk and advance governance across the Third-Party Program. You'll apply policy to vendor decisions and contribute automation using Python and modern agentic coding tools.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to review risk, build dashboards, and document improvements as Affirm transforms risk management into security engineering.

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or related field.
• Agentic coding tools (Cursor, Claude Code, Copilot) and Python for scripting/automation.
• Familiarity with cloud environments (AWS, GCP, Azure) and cloud security concepts.
• Knowledge of security frameworks (NIST, ISO 27001, SOC 2, PCI DSS).
• Clear written and verbal communication; translate risk concepts for technical and non-technical audiences.
• BA/BS in a relevant field or equivalent experience; professional certs preferred.

Responsibilities

• Conduct third-party security assessments and document risk findings for Affirm's TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and actions.
• Develop dashboards, metrics, and reporting for visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature Affirm's security governance.

Skills

Security

Risk management

Compliance

Python

Education

BA/BS in a relevant field

Professional certs (CISSP/CISM/CISA/CRISC) or equivalent

Tools

Cursor

Claude Code

Copilot

Job description

Affirm, a remote-first fintech, is seeking a Security Risk Management professional to evaluate third-party risk and advance governance across the Third-Party Program. You'll apply policy to vendor decisions and contribute automation using Python and modern agentic coding tools.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to review risk, build dashboards, and document improvements as Affirm transforms risk management into security engineering.