Remote Third-Party Security Engineer II

Affirm; Nashville (TN); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Flexible Spending Wallets

Generous time off

Employee stock purchase plan (ESPP)

Job summary

Affirm is a remote‑first company reinventing credit to be honest and approachable. We seek a Security Risk Manager to assess third‑party risk, automate GRC workflows with Python and agentic tools, and scale our Third-Party Risk Management program.

You’ll partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to improve controls, dashboards, and risk-informed decisions in a fast‑growing fintech environment.

Qualifications

• 3+ years in Information Security, Risk Management, Compliance, or related field.
• Familiarity with agentic coding tools (e.g., Cursor, Claude Code, Copilot) and Python for scripting/automation.
• Knowledge of cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Working knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Professional certification pursuit (CISSP, CISM, CISA, or CRISC) or equivalent experience; BA/BS preferred.

Responsibilities

• Conduct third-party security assessments, review vendor questionnaires, evaluate controls, and document risk findings for Affirm's TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code/agentic tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms for repeatable workflows.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and risk-informed decisions.
• Develop and maintain dashboards, metrics, and reporting for visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature Affirm's security governance.

Skills

Python scripting

Security risk management

Clear written and verbal communication

Agentic coding tools

Education

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

AWS

GCP

Azure

Job description

Affirm is a remote‑first company reinventing credit to be honest and approachable. We seek a Security Risk Manager to assess third‑party risk, automate GRC workflows with Python and agentic tools, and scale our Third-Party Risk Management program.

You’ll partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to improve controls, dashboards, and risk-informed decisions in a fast‑growing fintech environment.