Senior Manager, Security Risk Management - Remote

Overview

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

In Short

• Lead Security Governance and Third-Party Risk Management (TPRM).
• Own program strategy, operational maturity, and stakeholder alignment.
• Drive policy and control frameworks and remediate audit findings.
• Set security risk posture and improve tooling and automation adoption.
• Build and scale high-performing teams for vendor diligence and governance.
• Ensure timely, actionable escalations for senior leadership.
• Produce regular program health reporting for senior leadership.
• Manage third-party relationships and integrations.
• Implement and maintain QA processes and standards.
• Represent Security in executive forums and regulatory engagements.

Requirements

• 7+ years in information security, risk management, or GRC roles.
• 3+ years managing teams or equivalent leadership experience.
• Strong knowledge of security frameworks and compliance standards.
• Familiarity with TPRM/GRC tooling and observability.
• Excellent stakeholder management skills.
• Strong communication skills for technical and non-technical audiences.
• Certifications such as CISSP, CISM, CRISC, or similar.
• Experience in fintech or highly regulated industries.
• Proven experience translating audit findings into operational plans.
• Hands-on experience with threat-modeling and third-party integration security.

Benefits

• 100% subsidized medical coverage for you and your dependents.
• Generous stipends for health, wellness, and tech spending.
• Competitive vacation and holiday schedules.
• Employee stock purchase plan at a discount.