Security Risk Engineer — TPRM & Automation (Remote)

Far Coder; Northern (KY); Hybrid; USD 115,000 - 165,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

Employee stock purchase plan

Job summary

Affirm is hiring a Security Risk Management Specialist II for a remote role in the United States. The position focuses on third‑party risk, security governance, and automating GRC workflows with Python and agentic coding tools.

You will collaborate with Procurement, Legal, Engineering, IT, and Privacy to inform risk decisions. The role emphasizes building scalable, code‑defined workflows and maturing Security Risk Management into an engineering discipline, with a strong emphasis on policy

Qualifications

• 3+ years in Information Security, Risk Management, or related field.
• Comfort with agentic coding tools (Cursor, Claude Code, Copilot) and Python scripting for automation.
• Familiarity with cloud environments (AWS, GCP, Azure) and cloud security concepts.
• Knowledge of NIST, ISO 27001, SOC 2, PCI DSS.

Responsibilities

• Conduct third-party security assessments and document risk findings for the TPRM program.
• Build automation to reduce manual GRC workflows using Python and low-code tools.
• Configure integrations across ticketing, GRC, and vendor management platforms.

Job description

Affirm is hiring a Security Risk Management Specialist II for a remote role in the United States. The position focuses on third‑party risk, security governance, and automating GRC workflows with Python and agentic coding tools.

You will collaborate with Procurement, Legal, Engineering, IT, and Privacy to inform risk decisions. The role emphasizes building scalable, code‑defined workflows and maturing Security Risk Management into an engineering discipline, with a strong emphasis on policy