Security Risk Management Lead (Fully Remote)

Affirm, Inc.; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

100% medical, dental, vision for you &

Monthly stipends for tech, health, and

Flexible time off

Employee stock purchase plan

Job summary

Affirm, Inc. is seeking a Security Risk Management lead to advance an engineering-driven third-party program. You will own diligence for vendors in new international markets and during M&A, and you will design workflows with Python-powered automation.

Join a remote-first team that values security, transparency, and care, collaborating with business, legal, and engineering partners to raise security standards across the company.

Qualifications

• 5+ years of experience in Information Security, Risk Management, or relevant roles.
• Hands-on experience with agentic coding tools and Python, plus familiarity with cloud environments (AWS/GCP).
• Strong communication skills and ability to work with business, legal, and engineering stakeholders.
• 100% covered medical, dental, and vision for you and your dependents.
• Monthly stipends for tech, health, and wellness.
• Flexible time off, generous holidays, and employee stock purchase plan.

Responsibilities

• Lead and mature Affirm's Security Third Party Program, including design, implementation, and continuous improvement.
• Own pre-launch security due diligence for third parties supporting entry into new international markets and M&A.
• Design and operate workflow orchestration and use Python and agentic coding tools to automate manual processes.

Job description

• Affirm values security as critical to the company's continued success.
• The Security Risk Management team is evolving beyond traditional GRC into an engineering-driven program.

What You’ll Do:

• Lead and mature Affirms Security Third Party Program, including design, implementation, and continuous improvement.
• Own pre-launch security due diligence for third parties supporting entry into new international markets and M&A.
• Design and operate workflow orchestration and use Python and agentic coding tools to automate manual processes.

What We Look For:

• 5+ years of experience in Information Security, Risk Management, or relevant roles.
• Hands-on experience with agentic coding tools and Python, plus familiarity with cloud environments (AWS/GCP).
• Strong communication skills and ability to work with business, legal, and engineering stakeholders.
• 100% covered medical, dental, and vision for you and your dependents.
• Monthly stipends for tech, health, and wellness.
• Flexible time off, generous holidays, and employee stock purchase plan.

Affirm

Affirm provides clear, predictable buy now, pay later financial products with no hidden fees. It is a remote-first company that values security, transparency, and care, offering flexible benefits and an inclusive culture.