Security Risk Management Specialist II @Affirm

Overview

Affirm is reinventing credit to make it more honest and friendly, focusing on security as critical to the company's success. The Security Risk Management team is evolving to build an engineering-driven program that protects Affirm and its customers.

Key Responsibilities

• Conduct third-party security assessments, reviewing vendor questionnaires, evaluating security controls, and documenting risk findings.
• Build and maintain automation to reduce manual GRC workflows using Python and low-code platforms.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews.
• Develop and maintain dashboards, metrics, and reporting for stakeholder visibility into third-party risk posture.
• Contribute to process improvements and program documentation.

Requirements

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
• Familiarity with agentic coding tools and working knowledge of Python.
• Familiarity with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Clear communication skills for both technical and non-technical audiences.
• Professional certification such as CISSP, CISM, CISA, or CRISC is preferred, along with a BA/BS in a relevant field or equivalent experience.

Benefits

• 100% subsidized medical coverage, dental, and vision for you and your dependents.
• Generous stipends for technology, food, lifestyle needs, and family forming expenses.
• Competitive vacation and holiday schedules.
• Employee stock purchase plan allowing you to buy shares at a discount.

Location

Remote, US

How to Apply

Please submit your application through the provided link.

Deadline

No deadline stated.