Technology & IT

Security Risk Management Lead at Affirm

Posted

  • Company: Affirm
  • Location: Remote Canada
  • Job type: Full-time
  • Salary: CAD $128,000 – $188,000 per year

About the role

Affirm is looking for a Security Risk Management Lead to evolve its security program from a compliance-focused function into an engineering-driven discipline. You will lead the Security Third Party Program, focusing on designing, automating, and scaling controls that protect Affirm and its customers. This role is ideal for a candidate who is comfortable shaping policy and shipping automation using modern tooling to replace manual work with scalable, code-defined workflows.

Responsibilities

  • Lead and mature Affirm’s Security Third Party Program, including the design and implementation of processes and controls.
  • Own pre-launch security due diligence for third parties supporting entry into new international markets.
  • Support Finance, Legal, and Security leadership on M&A security due diligence and post-close integration.
  • Design and operate workflow orchestration and integrations across ticketing, GRC, and cloud control planes.
  • Partner with Procurement, Legal, Engineering, and other stakeholders to manage security risk across third-party relationships.
  • Identify opportunities to automate manual processes and prototype solutions using agentic coding tools.
  • Develop dashboards and reporting mechanisms to improve visibility into risk trends and program performance.

Requirements

  • 5+ years of experience in Information Security, Risk Management, or Engineering.
  • Experience performing security due diligence on M&A targets or running third-party risk assessments across multiple countries.
  • Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working knowledge of Python.
  • Familiarity with cloud environments (AWS, GCP, or Azure), including IAM, logging, and security controls.
  • Experience with industry-based information security frameworks such as NIST, ISO 2700x, SOC 1 & 2, or PCI DSS.
  • BA or BS degree in Information Security, Cyber Security, Computer Science, or a related field, or commensurate experience.

Pay and benefits

  • Base pay range: CAD $128,000 – $188,000 per year.
  • 100% subsidized medical coverage for you and your dependents, plus dental and vision.
  • Monthly stipends for health, wellness, and tech spending.
  • Flexible time off and generous holiday calendars.
  • Eligibility for equity rewards and an employee stock purchase plan (ESPP).

How to apply

Apply directly on Affirm’s own careers website. Omadaily never charges job seekers.

Apply on the employer’s website →