Lead third party security risk management remotely across Canada, using Python automation, cloud controls, and international due diligence expertise.

As Security Risk Management Lead at Affim, you will mature the Security Third Party Program beyond traditional governance, risk, and compliance. You will assess partners entering international markets, evaluate cloud architectures, and translate ambiguous requirements into scalable solutions. The work includes M&A; diligence, integrations, reporting, and risk-based recommendations.

Key Responsibilities:

- Lead Affim's Security Third Party Program and operational workflows
- Conduct pre-launch diligence for international market partners
- Assess acquisition targets and deliver risk-based deal recommendations




- Design workflow orchestration across GRC and vendor systems
- Automate processes, dashboards, reporting, and program insights

Requirements:

- Five or more years in information security or risk management
- Experience with M&A; diligence or multinational third party assessments
- Working Python knowledge and agentic coding tool experience
- Familiarity with AWS, GCP, or Azure security controls
- Knowledge of information security and control frameworks

Shape Affim's third party risk program through international diligence, Python automation, cloud assessment, and explicit stakeholder recommendations.

📌 Third Party Security Risk Lead (Saskatoon)
🏢 Affirm
📍 Saskatoon