Remote Security Risk Engineer - TPRM & Automation

Affirm; Miami (FL); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm, a remote-first company, seeks a Security Risk Management Specialist to scale its Third Party Risk Management program. You will evaluate third-party risk, automate GRC workflows with Python and agentic tools, and integrate across ticketing, GRC, and vendor systems.

You’ll partner with Legal, Procurement, Engineering, IT, and Privacy to drive risk-informed decisions. The role emphasizes building scalable, code-defined workflows and maturing security governance within a fast-growing,

Qualifications

• 3+ years in Information Security, Risk Management, Compliance, or a related field.
• Experience using agentic coding tools and Python for scripting/automation.
• Familiarity with cloud environments (AWS, GCP, Azure) and cloud security concepts.
• Working knowledge of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS.
• Strong written and verbal communication; ability to translate risk concepts for diverse audiences.
• Professional certification (CISSP/CISM/CISA/CRISC) or equivalent; BA/BS preferred.

Responsibilities

• Conduct third-party security assessments, review vendor questionnaires, and document risk findings for the TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low‑code tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and actions.
• Develop dashboards, metrics, and reporting for visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature security governance.

Skills

Security risk management

Python scripting

Agentic coding tools

Cloud security concepts

Communication skills

Education

CISSP / CISM / CISA / CRISC

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm, a remote-first company, seeks a Security Risk Management Specialist to scale its Third Party Risk Management program. You will evaluate third-party risk, automate GRC workflows with Python and agentic tools, and integrate across ticketing, GRC, and vendor systems.

You’ll partner with Legal, Procurement, Engineering, IT, and Privacy to drive risk-informed decisions. The role emphasizes building scalable, code-defined workflows and maturing security governance within a fast-growing,