Remote Security Risk Engineer – Third-Party & Automation

Affirm; Seattle (WA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Equity rewards

Health coverage for dependents

Wellness stipends

Job summary

Affirm is a remote‑first company redefining credit and security. We seek a Security Risk Management Specialist to scale our Third Party Risk program, assess vendor risk, and automate GRC workflows using Python and agentic tools.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk-informed decisions, build dashboards, and improve governance as Affirm evolves security from compliance to engineering discipline.

Qualifications

• 3+ years in information security, risk management or compliance.
• Familiar with agentic coding tools and Python scripting.
• Knowledge of cloud security in AWS/GCP/Azure.
• Understanding of NIST, ISO 27001, SOC 2 and PCI DSS.
• Excellent written and verbal communication.
• Working toward or holding professional security certifications.

Responsibilities

• Conduct third-party security assessments and document findings.
• Build automation to reduce GRC manual workflows.
• Configure integrations across ticketing, GRC and vendor platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy.
• Develop dashboards and metrics for risk visibility.
• Contribute to process improvements and governance documentation.

Skills

Information security

Risk management

Compliance

Python scripting

Cloud security concepts

Security frameworks

Education

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is a remote‑first company redefining credit and security. We seek a Security Risk Management Specialist to scale our Third Party Risk program, assess vendor risk, and automate GRC workflows using Python and agentic tools.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk-informed decisions, build dashboards, and improve governance as Affirm evolves security from compliance to engineering discipline.