Remote Security Risk Engineer - TPRM & Automation

Affirm; Dallas (TX); On-site; USD 115,000 - 165,000; Full time

Benefits offered by this job

Health insurance

ESPP

Time off

Flexible Spending Wallets

Job summary

Affirm is seeking a Security Risk Management Specialist to evaluate, build, and refine solutions for third-party risk and security governance. You will apply policy to vendor decisions and ship automation using Python and agentic coding tools to scale GRC work, partnering with business and engineering to transform risk management into a security engineering discipline.

You will lead assessments, automate workflows, and maintain integrations across platforms, while developing dashboards and

Qualifications

• Minimum 3+ years in Information Security, Risk Management, or Compliance.
• Experience applying security policy to real-world vendor decisions.
• Ability to ship automation using code-defined workflows.

Responsibilities

• Conduct third-party security assessments and document risk findings.
• Build and maintain automation to reduce manual GRC workflows.
• Configure integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews.
• Develop dashboards and reporting for visibility into third-party risk posture.
• Contribute to process improvements and program documentation.

Skills

Security Risk Management

Python scripting

Agentic coding tools

Cloud security concepts

Security frameworks (NIST ISO 27001)

Communication

Education

BA/BS in a relevant field

Professional certification such as CISSP/CISM/CISA/CRISC

Tools

Cursor

Claude Code/Copilot

Job description

Affirm is seeking a Security Risk Management Specialist to evaluate, build, and refine solutions for third-party risk and security governance. You will apply policy to vendor decisions and ship automation using Python and agentic coding tools to scale GRC work, partnering with business and engineering to transform risk management into a security engineering discipline.

You will lead assessments, automate workflows, and maintain integrations across platforms, while developing dashboards and