Security Risk Management Lead

📋 Description

• Lead and mature Affirm's Security Third Party Program, including the design, implementation, and
• Own pre-launch security due diligence for the third parties that support Affirm's entry into new
• Support Finance - Strategy & Development, Legal, and Security leadership on M&A security
• Lead post-close integration of an acquired company's vendor portfolio into Affirm's third party
• Design and operate workflow orchestration and integrations across systems like ticketing, GRC
• Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, Corporate

🎯 Requirements

• 5+ years of experience in Information Security, Risk Management, Engineering and/or relevant roles
• Experience performing security due diligence on M&A targets, or running third party risk
• Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working
• Familiarity with cloud environments (AWS, GCP, or Azure): IAM, logging, common services, and the
• Excellent written and verbal communications skills
• Experience engineering solutions via Python, Claude, Cursor or other agentic coding tooling

🎁 Benefits

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at