Remote Security Risk Engineer - Third-Party & Automation

Affirm; Las Vegas (NV); On-site; USD 115,000 - 165,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

Employee stock purchase plan

Job summary

Affirm is a remote-first company redefining credit with transparent, consumer-friendly terms. We are seeking a Security Risk Management professional to evaluate third-party risk, apply policy to vendor decisions, and automate GRC workflows with Python and agentic coding tools to scale governance.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk reviews, track actions, and build dashboards that illuminate third-party posture as Affirm grows.

Qualifications

• 3+ years in Information Security, Risk Management, or a related field.
• Experience applying security policy to vendor decisions and automation via code.
• Familiarity with cloud environments and common security frameworks.
• Strong written and verbal communication for technical and non-technical audiences.

Responsibilities

• Conduct third-party security assessments and document risk findings for TPRM.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code tools.
• Configure integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews.
• Develop dashboards and reporting to provide visibility into third-party risk posture.
• Contribute to process improvements and governance documentation.

Skills

Security risk management

Agentic coding tools

Python scripting

Cloud security concepts

Clear communication

Education

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is a remote-first company redefining credit with transparent, consumer-friendly terms. We are seeking a Security Risk Management professional to evaluate third-party risk, apply policy to vendor decisions, and automate GRC workflows with Python and agentic coding tools to scale governance.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk reviews, track actions, and build dashboards that illuminate third-party posture as Affirm grows.