Security Risk Management Lead

Affirm, Remote US

What you will do

Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows
Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using either Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.)
Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes

Affirm, Remote US

$146K–$225K

a year

This base pay is near the median for senior security engineering jobs that are remote in the US.

We compare the middle of each posted range. This is base pay as posted. The group does not include this job.

The Affirm site opens in a new tab.

See total pay at Affirm on Levels.fyiBase, stock and bonus, as employees report it.

No one has reported an interview at Affirm yet. Did you interview there? Add the questions.

Compare your résumé with this job. See where you match, what is missing and which lines to change.

Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows
Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using either Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.)
Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes