Security Risk Management Specialist II

🔥 0 minutes ago

🇨🇦 Canada – Remote

💵 $101k - $151k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔒 Insurance

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Affirm

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💳 Fintech

👥 B2C

🛍️ eCommerce

💰 Post-IPO Equity on 2021-01

Fintech • B2C • eCommerce

Affirm is a financial technology company that offers a 'Buy Now, Pay Later' service, allowing consumers to make purchases and pay for them over time with flexible payment plans. Affirm eliminates hidden fees and compound interest, providing clear terms and conditions for its users. The company also offers the Affirm Card, a debit card that allows users to request to pay over time for larger purchases or pay in full for smaller ones. Affirm partners with various retailers across multiple categories, including electronics, apparel, and travel, providing customers with the convenience of paying over time at checkout both online and in physical stores. Affirm's services are integrated with Apple Pay, enabling customers to make payments seamlessly from their iPhone or iPad.

📋 Description

• Evaluate, build, and refine solutions to third-party risk and security governance challenges • Conduct third-party security assessments, review vendor questionnaires, evaluate security controls, and document risk findings • Build and maintain automation for manual GRC workflows using Python, low-code platforms, and agentic coding tools • Configure and maintain integrations across ticketing, GRC, and vendor management platforms • Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews and risk-informed decisions • Develop and maintain dashboards, metrics, and reporting on third-party risk posture • Contribute to process improvements and program documentation to mature security governance

🎯 Requirements

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field • Comfortable using agentic coding tools such as Cursor, Claude Code, or Copilot • Working knowledge of Python for scripting or automation • Familiarity with AWS, GCP, or Azure and common cloud security concepts • Working knowledge of NIST, ISO 27001, SOC 2, and PCI DSS • Clear written and verbal communication skills • Ability to translate security risk concepts for technical and non-technical audiences • Hold or be working toward a professional certification such as CISSP, CISM, CISA, or CRISC, or bring equivalent practical experience • BA/BS in a relevant field, or equivalent experience, is preferred

🏖️ Benefits

• Monthly stipends for health, wellness and tech spending • 100% subsidized medical coverage for employees and dependents • Dental and vision coverage for employees and dependents • Flexible Spending Wallets with stipends for Technology, Food, Lifestyle needs, and family forming expenses • Competitive vacation and holiday schedules • Employee stock purchase plan (ESPP) enabling employees to buy Affirm shares at a discount • Reasonable accommodations during the hiring process