The ideal candidate will design, develop, configure, and implement solutions to complex technical and business problems across the Security Third Party Program and the broader Security Risk Management program, with a focus on the third parties affirm takes on when it enters new markets and acquires companies. They are equally comfortable shaping policy and shipping automation using contemporary tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will operate as a subject matter expert, interface with business, legal, corporate development, and engineering stakeholders, and play a key role in transforming Security Risk Management from a compliance oriented function into a security engineering disciplineLead and mature affirm’s Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflowsOwn pre-launch security due diligence for the third parties that support affirm’s entry into new international markets, such as local

📌 Security Risk Management Lead (Ottawa)
🏢 Affirm
📍 Ottawa