Security Risk Management Specialist II

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $130k - $180k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔒 Insurance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Affirm

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💳 Fintech

👥 B2C

🛍️ eCommerce

💰 Post-IPO Equity on 2021-01

Fintech • B2C • eCommerce

Affirm is a financial technology company that offers a 'Buy Now, Pay Later' service, allowing consumers to make purchases and pay for them over time with flexible payment plans. Affirm eliminates hidden fees and compound interest, providing clear terms and conditions for its users. The company also offers the Affirm Card, a debit card that allows users to request to pay over time for larger purchases or pay in full for smaller ones. Affirm partners with various retailers across multiple categories, including electronics, apparel, and travel, providing customers with the convenience of paying over time at checkout both online and in physical stores. Affirm's services are integrated with Apple Pay, enabling customers to make payments seamlessly from their iPhone or iPad.

📋 Description

• Conduct third-party security assessments by reviewing vendor questionnaires, evaluating security controls, and documenting risk findings • Build and maintain automation to reduce manual GRC workflows using Python, low-code platforms, and agentic coding tools • Configure and maintain integrations across ticketing, GRC, and vendor management platforms • Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews, follow-up actions, and risk-informed decisions • Develop and maintain dashboards, metrics, and reporting for third-party risk posture visibility • Contribute to process improvements and program documentation to mature security governance

🎯 Requirements

• 3+ years of experience in Information Security, Risk Management, Compliance, or a related field • Comfortable using agentic coding tools such as Cursor, Claude Code, or Copilot • Working knowledge of Python for scripting or automation • Familiarity with cloud environments such as AWS, GCP, or Azure and common cloud security concepts • Working knowledge of NIST, ISO 27001, SOC 2, and PCI DSS • Ability to communicate security risk concepts to technical and non-technical audiences • Hold or be working toward a professional certification such as CISSP, CISM, CISA, or CRISC, or bring equivalent practical experience • BA/BS in a relevant field, or equivalent experience, is preferred • Visa sponsorship is not available for this position

🏖️ Benefits

• Monthly stipends for health, wellness, and tech spending • 100% subsidized medical coverage, dental and vision for you and your dependents • Health care coverage with all premiums covered for all levels of coverage for you and your dependents • Flexible Spending Wallets with stipends for Technology, Food, Lifestyle needs, and family forming expenses • Competitive vacation and holiday schedules • Employee stock purchase plan (ESPP) enabling employees to buy Affirm shares at a discount • Reasonable accommodations during the hiring process