Third-Party Security Risk Engineer (Automation)

Affirm; Los Angeles (CA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Remote-first

Equity rewards

Medical coverage for you and depend

Stipends for health, wellness and tech

Job summary

Affirm is seeking a Security Risk Manager to evaluate and refine solutions for third-party risk within the Security Third Party Program. You’ll ship automation using Python, Cursor, Claude, and other agentic tools to replace manual GRC work with scalable workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk-informed decisions and build dashboards for visibility into risk posture. Minimum 3+ years in info security or risk roles is expected.

Qualifications

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Comfortable using agentic coding tools (Cursor, Claude Code, Copilot) and Python for scripting.
• Familiarity with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Strong written and verbal communication; ability to translate risk concepts for technical and non-technical audiences.
• Professional certification (CISSP, CISM, CISA, or CRISC) or equivalent practical experience; BA/BS preferred.

Responsibilities

• Conduct third-party security assessments and document risk findings for Affirm's TPRM program.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code/agentic tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and actions.
• Develop dashboards and metrics to provide visibility into third-party risk posture.
• Contribute to process improvements and program documentation to mature governance.

Skills

Information Security

Risk Management

Compliance

Cursor

Claude

Copilot

Python

Cloud security

NIST

ISO 27001

SOC 2

PCI DSS

CISSP

CISM

CISA

CRISC

Education

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

Job description

Affirm is seeking a Security Risk Manager to evaluate and refine solutions for third-party risk within the Security Third Party Program. You’ll ship automation using Python, Cursor, Claude, and other agentic tools to replace manual GRC work with scalable workflows.

You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to drive risk-informed decisions and build dashboards for visibility into risk posture. Minimum 3+ years in info security or risk roles is expected.