Security Risk Management Specialist II

📋 Description

• Scale Affirm's Third Party Risk Management program via process rigor, automation, and
• Conduct third-party security assessments, review vendor questionnaires, and document risk findings.
• Build and maintain automation to reduce manual GRC workflows using Python and agentic coding tools.
• Configure and maintain integrations across ticketing, GRC, and vendor management platforms.
• Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on risk reviews and
• Develop dashboards and reporting to provide visibility into third-party risk posture.

🎯 Requirements

• 3+ years in Information Security, Risk Management, Compliance, or related field.
• Experience with agentic coding tools (Cursor, Claude Code, Copilot) and Python scripting/automation.
• Familiarity with cloud environments (AWS, GCP, or Azure) and cloud security concepts.
• Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Strong written and verbal communication; ability to translate risk concepts for technical and
• Professional certification (CISSP, CISM, CISA, CRISC) or related experience; BA/BS preferred.

🎁 Benefits

• Health care coverage with premiums covered for you and dependents
• Flexible Spending Wallets for tech, lifestyle, and family needs
• Competitive vacation and holidays
• ESPP – employee stock purchase plan