Security Risk Engineer II - TPRM & Automation

Affirm; Houston (TX); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Equity rewards

Stipends for health/tech spending

100% subsidized medical coverage

Job summary

Affirm is a remote-first company redefining credit with security at the core. The Security Risk Management team is transforming governance into an engineering-driven program that protects Affirm and customers.

The role focuses on evaluating third-party risk, building automation with Python and agentic tooling, and partnering with Procurement, Legal, Engineering, and Privacy to mature the security program.

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or related field.
• Strong scripting or automation skills in Python.
• Familiarity with cloud environments (AWS, GCP, or Azure) and security frameworks (NIST, ISO 27001, SOC 2, PCI DSS).
• Ability to translate risk concepts for technical and non-technical audiences.
• Professional certifications (CISSP, CISM, CISA, CRISC) or equivalent experience preferred.

Responsibilities

• Conduct third-party security assessments, review vendor questionnaires, and document risk findings for the TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and agentic tooling.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.

Skills

Security risk management

Technical writing

Stakeholder collaboration

Education

BA/BS in relevant field

Tools

Python

Cursor

Claude Code

Copilot

Job description

Affirm is a remote-first company redefining credit with security at the core. The Security Risk Management team is transforming governance into an engineering-driven program that protects Affirm and customers.

The role focuses on evaluating third-party risk, building automation with Python and agentic tooling, and partnering with Procurement, Legal, Engineering, and Privacy to mature the security program.