Security Risk Management Specialist, Affirm
$115-180k
Salary dependent on location. + ESPP
More information about location
Buy-now-pay-later card for online and in-store
Be an early applicant
Buy-now-pay-later card for online and in-store
1001+ employees
Be an early applicant
$115-180k
Salary dependent on location. + ESPP
More information about location
1001+ employees
Company mission
To deliver honest and transparent financial products that improve users' lives.
Role
Who you are
- You have 3+ years of experience in Information Security, Risk Management, Compliance, or a related field
- You are comfortable using agentic coding tools (e.g., Cursor, Claude Code, Copilot) and have working knowledge of Python for scripting or automation
- You have familiarity with cloud environments (AWS, GCP, or Azure) and common cloud security concepts
- You have working knowledge of security frameworks and standards such as NIST, ISO 27001, SOC 2, and PCI DSS
- You communicate clearly in writing and verbally, and can translate security risk concepts for both technical and non-technical audiences
- You hold (or are working toward) a professional certification such as CISSP, CISM, CISA, or CRISC or bring equivalent practical experience. A BA/BS in a relevant field, or equivalent experience, is preferred
What the job involves
- Affirm values security as being critical to the company's continued success
- The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Affirm and our customers
- The ideal candidate will evaluate, build, and refine solutions to third-party risk and security governance challenges across the Security Third Party Program and the broader Security Risk Management program
- They are equally comfortable applying security policy to real-world vendor decisions and shipping automation using modern tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows
- They will develop deep expertise across the security risk domain, partner closely with business and engineering stakeholders, and play an active role in Affirm's transformation of Security Risk Management from a compliance-oriented function into a security engineering discipline
- We are looking for a curious, collaborative Security Risk Management Specialist to help scale Affirm's Third Party Risk Management program through process rigor, hands-on automation, and strong cross-functional partnership
- You will conduct third-party security assessments, reviewing vendor questionnaires, evaluating security controls, and documenting risk findings as a core contributor to Affirm's TPRM program
- You will build and maintain automation to reduce manual GRC workflows, using Python, low-code platforms, and agentic coding tools to improve program efficiency and scale
- You will configure and maintain integrations across ticketing, GRC, and vendor management platforms to support consistent and repeatable workflow execution
- You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews, follow-up actions, and risk-informed decisions
- You will help develop and maintain dashboards, metrics, and reporting that give stakeholders clear visibility into third-party risk posture
- You will contribute to process improvements and program documentation that mature Affirm's security governance over time
Our take
Affirm offers point-of-sale loans to consumers, working with merchants like Shopify, KAYAK, and Walmart. Buy now, pay later transactions have grown in popularity in recent years, and this business is tapping into the market with a totally different approach to credit - by delivering the Affirm card, the first US debit card with the option to pay-over-time.
Serving over 21 million consumers and over 300,000 merchants, the company offers flexible payback options ranging from 3 to 36 months. The interest rates run between 0% and 30%, so, while they are not necessarily the cheapest option, Affirm prides itself on having no fees for late payments, no hidden charges, and total transparency about what people will pay before they take out a loan.
Affirm collects payments from the customers and pays the merchants directly, shouldering the risk itself. The company has boosted its market share, expanding its availability beyond the US to include most of Canada, and continues to launch new features and create new partnerships towards bettering its offering.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-11% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Sep 2020
$500m
SERIES G
Apr 2019
$300m
SERIES F
Total funding: $1.1bn
Company benefits
- Compensation: We have a simple, flexible, and transparent remote-first compensation structure so you can make the best decisions for yourself and your family
- Spending Wallets: Access tech, food, lifestyle, and family planning wallets for your expenses
- Supportive Communities: Get involved with our employee resource groups and community groups
- Remote-first Workforce: If your role is remote, you can set up shop anywhere in your home country
- Generous Time Off: Take the time you need when life happens
- Health Benefits: Get a plan that fits your needs
- Mental Healthcare: Take care of your mind with great mental health programs
- Parental Leave: Birth and non-birth parents get 18 weeks’ paid leave. Plus, a 4-week return-to-work transition program, at full base pay
- Away Days: We offer 20 company-wide paid days off—which help our teams collectively pause to recharge
- Learning & Development: Engage in exciting learning programs to level up your growth
Company HQ
Chinatown, San Francisco, CA
Leadership
Max Levchin
(Co-Founder & CEO)Has founded/co-founded numerous companies, holding various executive positions at each, including Paypal, Slide, Glow, HVF Labs, and SciFi VC. Also worked at large brands including Google, Yelp, Yahoo, and Evernote.
Share this job
View 156 more jobs at Affirm