Lead third party security risk management remotely across Canada, using Python automation, cloud controls, and international due diligence expertise.
As Security Risk Management Lead at Affim, you will mature the Security Third Party Program beyond traditional governance, risk, and compliance. You will assess partners entering international markets, evaluate cloud architectures, and translate ambiguous requirements into scalable solutions. The work includes M&A; diligence, integrations, reporting, and risk-based recommendations.
Key Responsibilities: Lead Affim's Security Third Party Program and operational workflows
Conduct pre-launch diligence for international market partners
Assess acquisition targets and deliver risk-based deal recommendations




Design workflow orchestration across GRC and vendor systems
Automate processes, dashboards, reporting, and program insights
Requirements: Five or more years in information security or risk management
Experience with M&A; diligence or multinational third party assessments
Working Python knowledge and agentic coding tool experience
Familiarity with AWS, GCP, or Azure security controls
Knowledge of information security and control frameworks
Shape Affim's third party risk program through international diligence, Python automation, cloud assessment, and explicit stakeholder recommendations.

#J-18808-Ljbffr

📌 Third Party Security Risk Lead (Ontario)
🏢 Affirm
📍 Ontario