Remote Senior Security Risk & TPRM Automation Engineer

Affirm; Atlanta (GA); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is a remote-first company redefining credit with security at the core. The Security Risk Management team designs automated controls and workflows to protect Affirm and its customers.

The role focuses on evaluating third-party risk, applying policy to vendor decisions, and shipping automation using Python, Cursor, Claude, and other agentic coding tools to scale GRC work. You’ll partner with Procurement, Legal, and Engineering to mature security governance.

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Comfortable using agentic coding tools (e.g., Cursor, Claude Code, Copilot) and Python for scripting or automation.
• Familiarity with cloud environments (AWS, GCP, or Azure) and common cloud security concepts.
• Working knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Clear written and verbal communication, able to translate security risk concepts for technical and non-technical audiences.

Responsibilities

• Conduct third-party security assessments, reviewing vendor questionnaires, evaluating security controls, and documenting risk findings.
• Build and maintain automation to reduce manual GRC workflows using Python, low-code platforms, and agentic coding tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms to support repeatable workflows.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and risk-informed decisions.
• Develop and maintain dashboards, metrics, and reporting for visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature Affirm's security governance.

Skills

Python

Cursor

Claude Code

Copilot

Automation tooling

Education

BA/BS in a relevant field

Tools

Low-code Platforms

Job description

Affirm is a remote-first company redefining credit with security at the core. The Security Risk Management team designs automated controls and workflows to protect Affirm and its customers.

The role focuses on evaluating third-party risk, applying policy to vendor decisions, and shipping automation using Python, Cursor, Claude, and other agentic coding tools to scale GRC work. You’ll partner with Procurement, Legal, and Engineering to mature security governance.