Senior Security Programs Manager (InfoSec)

Affirm, Inc.; Washington (District of Columbia); Remote; USD 146,000 - 206,000; Full time

Benefits offered by this job

100% subsidized medical coverage

Tech stipend for setup

Flexible time off

Job summary

Affim is seeking a Senior Technical Program Manager to lead security programs protecting products, systems, and data. You will partner with Information Security, IT, and Engineering to turn priorities into clear roadmaps and drive delivery across teams, delivering measurable improvements in security and operational health.

You will align security needs with architectural reviews, threat modeling, and risk assessments, translating complex requirements into concrete engineering deliverables while

Qualifications

• 8+ years of experience leading complex technical programs.
• Experience in security domains such as product security, IAM, vulnerability management, or risk assessment.
• Translate goals into executable roadmaps with clear milestones, owners and success measures.
• Improve program delivery through practical processes and meaningful metrics.
• Build trust and influence without direct authority across a distributed organization.

Responsibilities

• Lead security programs from planning through delivery with cross-functional partners.
• Translate priorities and risk assessments into roadmaps balancing risk and capacity.
• Conduct architecture reviews and threat modeling to define deliverables.
• Manage dependencies, risks, and blockers with clear options.
• Coordinate remediation of vulnerabilities and ensure service levels.
• Establish planning and decision-making processes to scale programs.

Skills

Program management

Security knowledge

Cross-functional leadership

Risk assessment

Communication

Job description

Affim is seeking a Senior Technical Program Manager to lead security programs protecting products, systems, and data. You will partner with Information Security, IT, and Engineering to turn priorities into clear roadmaps and drive delivery across teams, delivering measurable improvements in security and operational health.

You will align security needs with architectural reviews, threat modeling, and risk assessments, translating complex requirements into concrete engineering deliverables while