Security Risk Engineering Lead (Remote)

Affirm, Inc.; California; Hybrid; USD 91,000 - 134,000; Full time

Benefits offered by this job

Health coverage

Monthly stipends for tech setup

Flexible time off

ESPP equity plan

Job summary

Affirm, Inc. is hiring a senior security risk management professional to own the Security Third Party Program. You will shape due diligence for new markets, assess vendor security postures, and drive post-close integration of vendor portfolios.

You will collaborate with Legal, Finance, IT, and Engineering to build scalable, automated risk workflows using Python and agentic tooling. Remote-first with Canada/US flexibility.

Qualifications

• BA or BS in Information Security, Cyber Security, Computer Science, or equivalent.
• Experience conducting security due diligence for M&A and multi-country programs.
• Hands-on with agentic coding tools and Python for automation.

Responsibilities

• Lead and mature the Security Third Party Program with process and control design.
• Perform pre-launch security due diligence for new markets and partners.
• Support M&A security due diligence and integration of vendor portfolios.
• Design workflow orchestration across ticketing, GRC, and vendor tools.
• Develop dashboards and program insights to improve risk visibility.

Skills

Security Risk Management

Third party risk

M&A due diligence

Python scripting

Agentic coding tools

Cloud security (AWS/GCP/Azure)

Effective communication

Education

BA/BS in Information Security / Cyber Security / CS

Tools

Cursor

Claude Code

Copilot

Job description

Affirm, Inc. is hiring a senior security risk management professional to own the Security Third Party Program. You will shape due diligence for new markets, assess vendor security postures, and drive post-close integration of vendor portfolios.

You will collaborate with Legal, Finance, IT, and Engineering to build scalable, automated risk workflows using Python and agentic tooling. Remote-first with Canada/US flexibility.