Top Cybersecurity Jobs in Chicago, IL

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Supports application security across product and engineering teams by reviewing code, configurations, pull requests, logs, and system designs; identifying and prioritizing vulnerabilities; guiding remediation; and contributing scripts, tooling, detections, tests, and secure coding practices. The role also involves vulnerability management, risk-based analysis, security communication, and collaboration across engineering, infrastructure, compliance, and product teams.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, and automate governance workflows using Python and coding tools. Configure integrations across ticketing, GRC, and vendor-management platforms; develop risk dashboards and reporting; and partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy. The role also supports security governance process improvements and applies frameworks including NIST, ISO 27001, SOC 2, and PCI DSS.

Design, build, and operate core CIAM backend services for registration, authentication, authorization, account lifecycle, and profile management. Implement OAuth2/OIDC/SAML/SCIM, develop APIs in Python/Kotlin, integrate identity platforms, automate deployments with IaC/CI-CD, and monitor/optimize services for reliability, security (MFA, token handling, encryption), and abuse detection at scale.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.