Security Risk Automation Engineer II

Affirm; Cleveland (OH); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health coverage and benefits for you &

Employee stock purchase plan

Stipends for tech and health spending

Job summary

Affirm is seeking a Security Risk Management Specialist to evaluate and refine third-party risk and governance across the Security Third Party Program. You will automate GRC workflows with Python and agentic coding tools, reducing manual work while partnering with business and engineering stakeholders to scale risk management.

You will lead third-party risk reviews, configure integrations, and develop dashboards with clear visibility into risk posture, contributing to the transformation of

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Familiar with agentic coding tools (e.g., Cursor, Claude Code, Copilot) and Python for scripting/automation.
• Experience with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Working knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Clear written and verbal communication translating security risk concepts for technical and non-technical audiences.

Responsibilities

• Conduct third-party security assessments and document risk findings for the TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and actions.
• Develop dashboards, metrics, and reporting to give stakeholders visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature security governance.

Skills

Python scripting

Security risk mgmt

Cloud security concepts

Stakeholder collaboration

Education

BA/BS in related field

CISSP

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is seeking a Security Risk Management Specialist to evaluate and refine third-party risk and governance across the Security Third Party Program. You will automate GRC workflows with Python and agentic coding tools, reducing manual work while partnering with business and engineering stakeholders to scale risk management.

You will lead third-party risk reviews, configure integrations, and develop dashboards with clear visibility into risk posture, contributing to the transformation of