Security Risk Lead, Third-Party Automation

Affirm; Boise (ID); On-site; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Competitive vacation and holiday schedules

Employee stock purchase plan (ESPP)

Job summary

Affirm is seeking a Security Risk Manager to lead the Security Third Party Program, enhancing security processes and controls. You will build automation while collaborating with various teams to manage third party security risks effectively.

Ideal candidates have 5+ years in Information Security, experience with Python, and knowledge of cloud environments like AWS. The position offers a transparent pay structure and competitive benefits including fully subsidized medical coverage.

Qualifications

• 5+ years of experience in Information Security or Risk Management.
• Hands-on experience with agentic coding tools and Python.
• Familiarity with cloud environments and security risks.

Responsibilities

• Lead and mature Affirm's Security Third Party Program.
• Build and maintain automation for manual GRC tasks.
• Assess and manage security risk across third party relationships.

Skills

Information Security

Risk Management

Python

Cloud environments (AWS, GCP)

Excellent communication skills

Education

BA or BS in Information Security, Cyber Security, Computer Science

Tools

Agentic coding tools (Cursor, Claude)

Job description

Affirm is seeking a Security Risk Manager to lead the Security Third Party Program, enhancing security processes and controls. You will build automation while collaborating with various teams to manage third party security risks effectively.

Ideal candidates have 5+ years in Information Security, experience with Python, and knowledge of cloud environments like AWS. The position offers a transparent pay structure and competitive benefits including fully subsidized medical coverage.