Senior market risk advisor at Enbridge, an energy infrastructure company, managing derivatives, hedging, and financial exposure. Modeling risks across FX, rates, commodities, and power markets.
About the role
- Security Risk Management Lead automating third-party risk, M&A due diligence, and cloud security workflows. Supporting Affirm's transparent pay-over-time financial products across Canadian markets.
Responsibilities
- Lead and mature Affirm's Security Third Party Program, including processes, controls, and operational workflows
- Own pre-launch security due diligence for third parties supporting entry into new international markets
- Adapt third party assessment standards for data residency, cross-border data transfer, and local regulatory requirements
- Support M&A security due diligence by assessing acquisition targets' security programs, controls, incident history, data handling, and third party dependencies
- Lead post-close integration of acquired companies' vendor portfolios into Affirm's third party program
- Design and operate workflow orchestration and integrations across ticketing, GRC, vendor management, identity, and cloud systems
- Partner with Procurement, Legal, Engineering, IT, Compliance, Privacy, Corporate Development, international launch teams, and business stakeholders
- Translate ambiguous business and security requirements into scalable program solutions and decision frameworks
- Automate manual processes and prototype solutions using modern tooling
- Establish repeatable processes, service-level expectations, metrics, and reporting
- Evaluate third party security controls, AWS/GCP cloud architectures, integration patterns, and risk posture
- Conduct threat modeling assessments on high-risk integrations
- Manage and prioritize complex security risk reviews and initiatives, including confidential deal work
- Develop dashboards, reporting mechanisms, and program insights using SQL, BI tools, or custom tooling
- Act as a trusted advisor and subject matter expert on third party security risk management
- Contribute to Security Risk Management strategy by scaling and strengthening security governance through engineering
Requirements
- 5+ years of experience in Information Security, Risk Management, Engineering and/or relevant roles
- Experience performing security due diligence on M&A targets, or running third party risk assessments across multiple countries or regulatory regimes
- Hands-on experience using agentic coding tools such as Cursor, Claude Code, and Copilot
- Working knowledge of Python sufficient to read, modify, and run scripts, build automations, and ship small tools end-to-end
- Familiarity with AWS, GCP, or Azure, including IAM, logging, common services, and cloud security risks and controls
- Experience engineering solutions via Python, Claude, Cursor, or other agentic coding tooling
- Experience with information security and control frameworks including NIST Cybersecurity Framework, ISO 2700x, SOC 1 & 2 (SSAE 18), ISAE 3402, PCI DSS, NIST 800-53, and CIS Critical Security Controls
- BA or BS degree in Information Security, Cyber Security, Computer Science, or related field, or commensurate experience
- Experience with security practices and security tooling
- Demonstrated ability to drive projects toward completion
- Ability to communicate technical issues to non-technical teams and leadership
- Sound judgment and discretion handling confidential, deal-sensitive information
- Familiarity with international data protection and third party or operational resilience requirements is a plus
- Professional certification in Information Security or Risk Management, such as CISSP, CISM, CISA, or CRISC, is a plus
- Excellent written and verbal communication skills
Benefits
- 100% subsidized medical coverage for employees and dependents
- Dental and vision coverage for employees and dependents
- Monthly tech setup spending stipend
- Monthly health and wellness spending stipends
- Flexible time off
- Generous holiday calendars
- Employee stock purchase plan (ESPP) allowing employees to buy Affirm stock at a discount
- Remote-first work flexibility
- In-person onboarding experience for all new hires
- Inclusive interview process and accommodations for candidates with disabilities
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
RBC Insurance Advisor building client portfolios through life, health, and wealth insurance advice. Prospecting, networking, and Salesforce - based relationship management across Ontario.
Senior Scientist overseeing aggregate safety reporting, risk management, and pharmacovigilance for ClinChoice, a global clinical research organization. Leading safety analyses, regulatory deliverables, and cross - functional stakeholder coordination.
RBC Insurance Advisor building client portfolios through life, health, wealth, and financial advice. Prospecting, networking, and relationship management across Eastern Ontario.
Claims advisor handling property and casualty insurance claims for Desjardins. Investigating losses, assessing eligibility, negotiating settlements, and supporting members and clients.
Versicherungsbroker berät KMU - Kunden umfassend und entwickelt massgeschneiderte Versicherungslösungen. e - broker.ch verbindet Versicherungs - , Finanz - und Vermögensberatung für Schweizer Kund*innen.
Information risk management strategy leader supporting Manulife’s global risk organization. Delivering executive reporting, strategic roadmaps, governance, and complex operational initiatives.
Insurance fraud specialist analyzing claims evidence and reconstructing loss events for Gramian Consultancy’s AI training and evaluation projects. Producing evidence - based assessments of staged and fraudulent claims.
Remote life insurance broker converting Ratehub’s provided leads into policies. Advising Canadians on Life Insurance, Critical Illness, and Disability coverage.
Senior Insurance Education Specialist educating Ontario physicians and medical students about OMA Insurance products. Creating presentations, events, outreach plans, and member engagement initiatives.