Staff Security Project Manager
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm values security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Technical Project Manager will work with the Security GRC and Engineering teams to develop project roadmaps, identify cross functional project and compliance tasks, drive task requirements, and track task completion.
What You'll Do
- Translate business objectives into project execution strategy, lead and successfully execute the strategy through strong, cross-team collaboration
- Negotiate project timelines by working within project constraints and across multiple team managers
- Develop trusted relationships with key technology, functional leaders, and partners to drive focus on the strategic program objectives and optimize program delivery.
- Support and hold project resources accountable for their responsibilities within the program
- Anticipate and remove obstacles that slow down or prevent programs from delivering on program objectives
- Drive for clarity to keep teams moving forward and provide leadership, transparency, and visibility to the entire technology organization
What We Look For
- 5+ years of experience in software security, preferably in security program development, technical program management, or IT security compliance
- Experience building a roadmap and managing complex programs with people, process, and technology components
- Knowledge of industry-based risk and control frameworks (e.g. NIST Cyber Security Framework, ISO 2700x, SOC1&2 (SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.)
- Attention to detail and demonstrated ability to drive projects towards completion
- Ability to understand and communicate technical issues to non-technical teams
- Passion for working with diverse teams, understanding and taking into account each perspective, as an auditor, engineer, business person, and more.
- Professional certification (such as CISSP, CISM, CISA, CRISC, etc.) and professional security assurance experience (Government Agency, Public accounting/ consulting background, Financial Institution) is a plus.
Location
We’re excited to announce that Affirm is now a remote-first company! This role can be located anywhere in Canada (with the exception of Quebec). Remote based employees may occasionally travel to an Affirm office for meetings or team building events. Our offices in San Francisco, New York City, Pittsburgh, Chicago, and Salt Lake City will remain operational and accessible for anyone to use on a voluntary basis.”
#LI-Remote
Check out our remote-first approach to learn more about the new ways we work.
If you got this far, we hope you're feeling excited about this role. Even if you don't feel you meet every single requirement, we still encourage you to apply. We're eager to meet people who believe in Affirm's mission and can contribute to our team in a variety of ways—not just candidates who check all the boxes.
At Affirm, People Come First is one of our core values, and that’s why diversity and inclusion are vital to our priorities as an equal opportunity employer. You can read about our D&I program here and our progress thus far in our 2020 DEI Report.
We also believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.
We will consider for employment qualified applicants with arrest and conviction records in accordance with applicable federal, state, and local laws, including the San Francisco Fair Chance Ordinance. By clicking "Submit Application," I acknowledge that I have read the Affirm Employment Privacy Policy, and hereby consent to the collection, processing, use, and storage of my personal information as described therein.