Third Party Security Risk Lead

Lead third party security risk management remotely across Canada, using Python and modern automation tools to strengthen Affim’s security programs.

As Security Risk Management Lead, you will mature Affim’s Security Third Party Program and support international market launches and acquisitions. You will assess vendors, acquisition targets, cloud environments, and integration risks while translating requirements into scalable workflows. The work connects security, legal, finance, procurement, engineering, privacy, and corporate development stakeholders.

Key Responsibilities:

• Lead third party security processes, controls, and operational workflows
• Own pre-launch diligence for international market partners
• Assess acquisition security programs, controls, incidents, and dependencies
• Automate workflows across GRC, ticketing, vendor, and cloud systems
• Develop dashboards, metrics, reporting, and risk recommendations

Requirements:

• Five or more years in information security or risk management
• Experience with M&A diligence or multinational third party assessments
• Working knowledge of Python and agentic coding tools
• Familiarity with AWS, GCP, or Azure security controls
• Strong communication, judgment, and project completion skills

Bring third party diligence, Python automation, cloud security, and risk leadership to Affim’s remote-first Canadian team.