Similar Jobs
See allSr. Legal Risk Manager
Privia Health
NIST
HITRUST
SOX
Governance, Risk and Compliance (GRC) Analyst
CapIntel
North America
Security
Compliance
Risk Management
Sr. Risk Specialist
New American Funding
US
Risk Management
Vendor Management
Microsoft 365
Security Supply Chain Manager
Webflow
US
Security
Due Diligence
Supply Chain
Member of Compliance, TPRM
Anchorage Digital
US
Risk Management
Information Security
Quality Control
Program strategy & governance:
- Maintain and evolve security policies, standards, and control frameworks.
- Lead program maturity planning, roadmaps, and cross-functional governance forums.
- Define and enforce security risk appetite and decision criteria for third-party relationships and integrations.
Third-party risk management:
- Lead the Security TPRM function across vendor lifecycle.
- Ensure robust fourth-party oversight, including subprocessors, and manage remediation/QA cycles.
- Oversee high-risk vendor decisions and escalations; establish clear RACI for partnership contracts and security acceptance criteria.
People & stakeholder leadership:
- Build, coach, and scale the Governance and TPRM teams.
- Act as the primary security contact for Legal, Procurement, Privacy, Product, and Engineering on vendor risk and governance matters.
- Represent Security in executive forums, audit meetings, and regulatory engagements; own remediation commitments and timelines.
Affirm
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. The majority of their roles are remote. They offer competitive benefits anchored to the core value of people come first.