Affirm · 2 days ago

Security Risk Management Lead

United States

Full-time

Remote

Senior Level

$160K/yr - $210K/yr

3+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Financial ServicesFinTech

Comp. & Benefits

Insider Connection @Affirm

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Develop complementary control frameworks defining security responsibilities of Affirm and third parties.

Mature third-party security risk processes by collaborating with technical and non-technical stakeholders.

Execute end-to-end third-party due diligence and issues management.

Design and produce metrics and reports on risk indicators and issues.

Support Legal in contract reviews to ensure appropriate security terms.

Provide support for client-facing teams and business partners on security assurance.

Communicate security risks to non-experts effectively.

Develop and disseminate security governance documentation.

Partner with engineering and IT to define policies for secure data treatment.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Risk ManagementInformation SecurityBusiness NeedRisk AssessmentControl FrameworksNIST Cyber Security FrameworkISO 2700xSOC1 & 2 (SSAE18)PCI DSSNIST-800-53FFIEC Cybersecurity Assessment ToolSANS Top 20Security PracticesSecurity Solutions

Required

3-5 years of risk management, information security, or other relevant experience working with technical teams and balancing risk against business need.

Knowledge of risk and control frameworks (e.g. NIST Cyber Security Framework, ISO 2700x, SOC1 & 2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.) and experience with security practices and solutions.