TPRM Security Risk Engineer | Automation & Governance

Affirm; Detroit (MI); On-site; USD 115,000 - 180,000; Full time

Benefits offered by this job

Health coverage

Equity

Wellness stipends

Tech stipends

Remote-first company

Job summary

Affirm is reinventing credit with a remote-first culture that anchors security at its core. The Security Risk Management team engineers scalable controls, automates workflows, and protects affirm and customers alike.

The role focuses on evaluating third-party risk, building automation with Python and agentic tools, and partnering across Procurement, Legal, Engineering, and Privacy to drive risk-informed decisions and mature governance.

Qualifications

• 3+ years of information security, risk management, or compliance.
• Comfort with agentic coding tools and Python scripting.
• Familiar with cloud environments (AWS, GCP, Azure) and security concepts.
• Knowledge of NIST, ISO 27001, SOC 2, PCI DSS.
• Strong written and verbal communication; translate risk concepts clearly.

Responsibilities

• Conduct third-party security assessments and document risk findings.
• Build automation to reduce manual GRC workflows using Python and low-code tools.
• Configure and maintain integrations across ticketing, GRC, and vendor platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews.
• Develop dashboards and reporting to provide visibility into third-party risk.
• Contribute to process improvements and program documentation.

Skills

Third-party risk

Automation

Python scripting

GRC tools

Cloud security

Stakeholder communication

Education

BA/BS in a relevant field

Tools

Cursor

Claude Code

Copilot

GRC platforms

Job description

Affirm is reinventing credit with a remote-first culture that anchors security at its core. The Security Risk Management team engineers scalable controls, automates workflows, and protects affirm and customers alike.

The role focuses on evaluating third-party risk, building automation with Python and agentic tools, and partnering across Procurement, Legal, Engineering, and Privacy to drive risk-informed decisions and mature governance.