Security Risk Management Specialist II

Affirm
Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan
Workplace: RemoteFull timeCAD 101,000 - 151,000 annuallyFunction: Legal, Risk & ComplianceSkills: ["Communication","Cross-functional collaboration","Problem-solving"]

Evaluate and improve third-party risk and security governance across Affirm’s Security Third Party Program and broader Security Risk Management. Conduct vendor security assessments, review questionnaires, and document risk findings. Build automation to replace manual GRC workflows using Python and agentic coding tools, and maintain integrations across ticketing and GRC platforms. Partner cross-functionally to mature security governance, and produce dashboards and metrics for clear visibility into vendor risk posture.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Affirm
Affirm
2 days ago

Security Risk Management Specialist II

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Evaluate and improve third-party risk and security governance across Affirm’s Security Third Party Program and broader Security Risk Management. Conduct vendor security assessments, review questionnaires, and document risk findings. Build automation to replace manual GRC workflows using Python and agentic coding tools, and maintain integrations across ticketing and GRC platforms. Partner cross-functionally to mature security governance, and produce dashboards and metrics for clear visibility into vendor risk posture.
Location: Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, Saskatchewan
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Conduct third-party security assessments by reviewing vendor questionnaires, evaluating security controls, and documenting risk findings for the TPRM program.
  • •Build and maintain automation to reduce manual GRC workflows using Python, low-code platforms, and agentic coding tools.
  • •Configure and maintain integrations across ticketing, GRC, and vendor management platforms to support consistent workflow execution.
  • •Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to complete third-party risk reviews, follow up actions, and enable risk-informed decisions.
  • •Develop and maintain dashboards, metrics, and reporting to improve visibility into third-party risk posture, and continuously improve program documentation and process rigor.

Pay and Benefits

Salary: CAD 101,000 - 151,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionPaid LeaveEspp

Key Requirements

  • •3+ years of experience in information security, risk management, compliance, or related fields.
  • •Working knowledge of Python for scripting or automation and comfort using agentic coding tools (e.g., Cursor, Claude Code, Copilot).
  • •Familiarity with cloud environments (AWS, GCP, or Azure) and common cloud security concepts.
  • •Working knowledge of security frameworks/standards such as NIST, ISO 27001, SOC 2, and PCI DSS.
  • •Hold (or be working toward) certifications such as CISSP, CISM, CISA, or CRISC, or bring equivalent practical experience (BA/BS preferred).
Skills:CommunicationCross-functional collaborationProblem-solving
Certifications:CISSPCISMCISACRISC
Tech Stack:PythonCursorClaudeClaude CodeCopilotAWSGCPAzureNISTISO 27001SOC 2PCI DSS

Company Brief

Affirm
Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.
Industry: Lending
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2012
WebsiteLinkedIn