Lead third party security risk management remotely across Canada, using Python and contemporary automation tools to strengthen Affim’s security programs.As Security Risk Management Lead, you will mature Affim’s Security Third Party Program and support international market launches and acquisitions. You will assess vendors, acquisition targets, cloud environments, and integration risks while translating requirements into scalable workflows. The work connects security, legal, finance, procurement, engineering, privacy, and corporate development stakeholders.Key Responsibilities:

Lead third party security processes, controls, and operational workflowsOwn pre-launch diligence for international market partnersAssess acquisition security programs, controls, incidents,



and dependenciesAutomate workflows across GRC, ticketing, vendor, and cloud systemsDevelop dashboards, metrics, reporting, and risk recommendationsRequirements:

Five or more years in information security or risk managementExperience with M&A; diligence or multinational third party assessmentsWorking knowledge of Python and agentic coding toolsFamiliarity with AWS, GCP, or Azure security controlsStrong communication, judgment, and project completion skillsBring third party diligence, Python automation, cloud security, and risk leadership to Affim’s remote-first Canadian team.

📌 Third Party Security Risk Lead (Winnipeg)
🏢 Leyla
📍 Winnipeg