Security Risk Automation Engineer (TPRM)

Affirm; Phoenix (AZ); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Remote-first company

Equity rewards

Monthly stipends for health, wellness,

Tech spending

Job summary

Affirm is hiring for a Security Risk Management professional to evaluate third-party risk and governance challenges. You will automate GRC workflows using Python and agentic coding tools, and partner with Procurement, Legal, Engineering, and Privacy on risk reviews.

You will build dashboards and documentation to improve security governance and support risk-informed decisions. This role advances Affirm's transformation into a security engineering discipline.

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Experience with agentic coding tools (Cursor, Claude Code, Copilot) and Python for scripting or automation.
• Familiarity with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Knowledge of security frameworks and standards such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Strong written and verbal communication; ability to translate security risk concepts for technical and non-technical audiences.
• Professional certification such as CISSP, CISM, CISA, or CRISC or equivalent practical experience; BA/BS preferred.

Responsibilities

• Conduct third-party security assessments, reviewing vendor questionnaires and documenting risk findings for the TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code platforms.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms to support repeatable workflows.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and actions.
• Develop dashboards, metrics, and reporting to provide visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature security governance.

Skills

Security risk management

Python scripting

Agentic coding tools

Cloud security concepts

Communication

Security certifications (CISSP/CISM/Cy

Education

BA/BS in a related field

Tools

Cursor

Claude Code

Copilot

GRC tooling

Job description

Affirm is hiring for a Security Risk Management professional to evaluate third-party risk and governance challenges. You will automate GRC workflows using Python and agentic coding tools, and partner with Procurement, Legal, Engineering, and Privacy on risk reviews.

You will build dashboards and documentation to improve security governance and support risk-informed decisions. This role advances Affirm's transformation into a security engineering discipline.