Security Risk Management Specialist II

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute third-party security evaluations by analyzing vendor questionnaires, assessing security controls, and documenting identified risks.

• Develop and sustain automation processes to minimize manual GRC workflows utilizing Python, low-code platforms, and agentic coding tools.

• Set up and manage integrations across ticketing systems, GRC platforms, and vendor management tools.

• Collaborate with teams in Procurement, Legal, Engineering, IT, Compliance, and Privacy to conduct third-party risk assessments, implement follow-up actions, and make risk-informed decisions.

• Create and uphold dashboards, metrics, and reports to enhance visibility into third-party risk posture.

• Assist in refining processes and program documentation to advance security governance maturity.

⛳️ Requirements

• Over 3 years of experience in Information Security, Risk Management, Compliance, or a related discipline.

• Proficient in using agentic coding tools such as Cursor, Claude Code, or Copilot.

• Familiarity with Python for scripting or automation tasks.

• Knowledgeable in cloud environments like AWS, GCP, or Azure and common cloud security principles.

• Understanding of NIST, ISO 27001, SOC 2, and PCI DSS standards.

• Capable of conveying security risk concepts to both technical and non-technical stakeholders.

• Possess or be in pursuit of a professional certification such as CISSP, CISM, CISA, or CRISC, or have equivalent practical experience.

• A BA/BS in a relevant field, or equivalent experience, is preferred.

• This position does not offer visa sponsorship.

🏝️ Benefits

• Monthly stipends for health, wellness, and technology expenses.

• Comprehensive medical coverage, including dental and vision, fully subsidized for you and your dependents.

• Health care coverage with all premiums paid for all coverage levels for you and your dependents.

• Flexible Spending Wallets with stipends for Technology, Food, Lifestyle needs, and family formation costs.

• Generous vacation and holiday policies.

• Employee stock purchase plan (ESPP) allowing employees to purchase Affirm shares at a discounted rate.

• Reasonable accommodations provided during the hiring process.