Security Risk Management Specialist II

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assess, develop, and enhance solutions for challenges related to third-party risk and security governance.

• Perform third-party security evaluations, analyze vendor questionnaires, assess security measures, and document risk assessments.

• Create and sustain automation for manual GRC workflows utilizing Python, low-code platforms, and agentic coding tools.

• Set up and manage integrations across ticketing, GRC, and vendor management systems.

• Collaborate with Procurement, Legal, Engineering, IT, Compliance, and Privacy teams on third-party risk evaluations and risk-aware decision-making.

• Design and manage dashboards, metrics, and reports regarding third-party risk status.

• Contribute to enhancements in processes and program documentation to advance security governance maturity.

⛳️ Requirements

• Over 3 years of experience in Information Security, Risk Management, Compliance, or a related discipline.

• Proficient in using agentic coding tools such as Cursor, Claude Code, or Copilot.

• Practical knowledge of Python for scripting or automation tasks.

• Understanding of AWS, GCP, or Azure and fundamental cloud security principles.

• Familiarity with NIST, ISO 27001, SOC 2, and PCI DSS standards.

• Strong written and verbal communication abilities.

• Capability to convey security risk concepts to both technical and non-technical audiences.

• Possess or be in pursuit of a professional certification like CISSP, CISM, CISA, or CRISC, or have equivalent hands-on experience.

• A BA/BS in a relevant field or equivalent experience is preferred.

🏝️ Benefits

• Monthly stipends for health, wellness, and technology expenses.

• 100% covered medical insurance for employees and their dependents.

• Dental and vision insurance for employees and their dependents.

• Flexible Spending Wallets providing stipends for Technology, Food, Lifestyle needs, and family planning expenses.

• Competitive vacation and holiday policies.

• Employee stock purchase plan (ESPP) allowing employees to purchase Affirm shares at a discounted rate.

• Reasonable accommodations provided during the hiring process.