Information Security
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
About the InfoSec team
The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence.
About the role
In this role, you'll help mature Affirm's insider threat program. You'll build out the controls, detection use cases, and investigative practices that make it work day to day, support insider risk investigations, and partner with Legal, HR, Privacy, and Compliance to keep the program effective, proportionate, and trusted by Affirmers.
What you’ll do
- Lead the build-out of key insider threat workstreams, from initial design through to day-to-day operation
- Build out the program's operating mechanics, including investigative standards, playbooks, and the metrics and reporting that show whether the program is working
- Support insider risk investigations alongside SIRT, bringing insider threat expertise, telemetry and evidence analysis, and written findings and risk recommendations
- Partner with Legal, HR/Employee Relations, Privacy, and Compliance on case handling and escalation criteria, helpin