Description
Affirm is hiring a Security Third Party Program Manager to lead and mature its third-party security risk program through policy, controls, workflows, automation, and stakeholder management. The role focuses on replacing manual GRC work with Python, low-code, and agentic-coding solutions; operating integrations across ticketing, GRC, vendor management, identity, and cloud systems; evaluating third-party security controls and cloud architectures; and providing dashboards and risk insights. Candidates need at least five years of relevant information security, risk management, or engineering experience, cloud and security-framework knowledge, and a relevant degree or commensurate experience. The position is remote-first, offers base pay of $165,000–$225,000 per year in specified U.S. states, and does not provide visa sponsorship.
