Security Risk Lead, Third-Party & Automation

Affirm, Inc.; San Diego (CA); On-site; USD 165,000 - 225,000; Full time

Benefits offered by this job

Health care coverage

ESPP - Employee stock purchase plan

Time off - vacation/holidays

Job summary

Affirm, Inc. is seeking a security leader to advance the company's third party risk program. You will design, implement, and automate controls, workflows, and evidence collection to protect Affirm and customers.

In this role you will partner across Procurement, Legal, Engineering, IT, Compliance, Privacy, and business stakeholders to translate requirements into scalable solutions and drive measurable risk reduction. Visa sponsorship not available.

Qualifications

• 5+ years in information security, risk management, or related roles.
• Hands-on with agentic coding tools and Python scripting.
• Familiar with AWS/GCP/Azure and cloud security controls.
• Strong written and verbal communication.
• Professional certifications (CISSP, CISM, CISA, CRISC) a plus.

Responsibilities

• Lead and mature Affirm's Security Third Party Program with processes and controls.
• Build automation for GRC tasks using Python and low code tools.
• Design workflows across ticketing, GRC, and vendor tools.
• Partner with Procurement, Legal, Engineering, IT, Compliance.
• Develop dashboards and program insights to improve risk visibility.
• Act as trusted advisor on third party security risk management.

Skills

Agentic coding tools

Python proficiency

Cloud security basics

Excellent communication

Security risk management

Education

BA/BS in Information Security or related field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm, Inc. is seeking a security leader to advance the company's third party risk program. You will design, implement, and automate controls, workflows, and evidence collection to protect Affirm and customers.

In this role you will partner across Procurement, Legal, Engineering, IT, Compliance, Privacy, and business stakeholders to translate requirements into scalable solutions and drive measurable risk reduction. Visa sponsorship not available.