At Affim, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.About the teamAffirm values security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at affirm, enabling the company to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect affirm and our customers.The ideal candidate will design, develop, configure, and implement solutions to complex technical and business problems across the Security Third Party Program and the broader Security Risk Management program, with a focus on the third parties affirm takes on when it enters new markets and acquires companies.



They are equally comfortable shaping policy and shipping automation using contemporary tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will operate as a subject matter expert, interface with business, legal, corporate development, and engineering stakeholders, and play a key role in transforming Security Risk Management from a compliance oriented function into a security engineering discipline.What You’ll Do:Lead and mature affirm’s Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflowsOwn pre-launch security due diligence for the third parties that support affirm’s entry into new international markets, such as local

📌 Security Risk Management Lead (Winnipeg)
🏢 Affirm
📍 Winnipeg