Senior Information Security Program Manager (Remote)

Affirm, Inc.; Nashville (TN); Remote; USD 146,000 - 225,000; Full time

Benefits offered by this job

Health coverage

Monthly tech stipends

Generous time off

ESPP

Job summary

Affim is seeking a Senior Technical Program Manager to lead security programs protecting products, systems, and data. You will partner with Information Security, IT, and Engineering to convert priorities into actionable roadmaps, drive delivery across teams, and improve security and operational health.

The role emphasizes turning complex security priorities into clear plans, managing dependencies, and coordinating remediation efforts to sustain high security posture.

Qualifications

• 8+ years of experience leading complex technical programs across multiple teams.
• Experience in security domains such as product/platform security or IAM.
• Ability to turn ambiguous goals into actionable plans with milestones and owners.
• Proven track record in improving program delivery with metrics and evidence.

Responsibilities

• Lead technical security programs from planning through delivery with cross-functional partners.
• Translate priorities and risk assessments into executable roadmaps.
• Engage in architecture reviews and threat modeling, translating security requirements into engineering deliverables.
• Manage dependencies, risks, and delivery across teams, resolving blockers.
• Coordinate remediation of vulnerabilities and security findings to meet SLAs.
• Establish planning and decision-making processes to scale security programs.

Skills

Program leadership

Security domain experience

Threat modeling

Cross-team collaboration

Metrics-driven

Job description

Affim is seeking a Senior Technical Program Manager to lead security programs protecting products, systems, and data. You will partner with Information Security, IT, and Engineering to convert priorities into actionable roadmaps, drive delivery across teams, and improve security and operational health.

The role emphasizes turning complex security priorities into clear plans, managing dependencies, and coordinating remediation efforts to sustain high security posture.