128K–188K CAD / year
Security Risk Management Lead
OtherRemote — Canada
Published on 2026-10-26
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Lead and mature Affirm’s security third-party risk program, with a focus on due diligence for international market launches and M&A. The role combines security risk assessment and stakeholder advising with hands-on automation to scale workflows and improve program visibility.
About the company
Affirm offers buy now, pay later financing that lets consumers split purchases into transparent installment payments at checkout. It partners with merchants to provide flexible credit options without late fees.
The team
Security Risk Management team
Stack
PythonCursorClaudeAWSGCPSQL
What you'll do
- Lead third-party security risk processes, controls, and operational workflows
- Conduct pre-launch security diligence for international partners and assess market-specific risks
- Support M&A diligence and post-close integration of acquired companies’ vendor portfolios
- Design workflow automation and integrations across security and business systems
- Assess cloud controls, integrations, and high-risk partner threat models
- Create metrics, dashboards, and reporting to track risk and program performance
What we're looking for
- 5+ years of experience in information security, risk management, engineering, or a related field
- Experience with M&A security diligence or third-party risk assessments across countries or regulatory regimes
- Working knowledge of Python and hands-on experience with agentic coding tools
- Familiarity with cloud security in AWS, GCP, or Azure
- Knowledge of security frameworks such as NIST, ISO 2700x, SOC 1/2, PCI DSS, or CIS Controls
- Strong communication, project delivery, judgment, and discretion
Nice to have
- Familiarity with GDPR, EU DORA, and international data protection or operational resilience requirements
- CISSP, CISM, CISA, CRISC, or another information security or risk management certification
- Bachelor’s degree in information security, cybersecurity, computer science, or related field, or equivalent experience
Benefits
- 100% subsidized health, dental, and vision coverage for employees and dependents
- Monthly technology, health, and wellness stipends
- Flexible time off and generous holidays
- Employee stock purchase plan