Senior Technical Program Manager

At Affirm, we exist for the moments that matter,giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.

The InfoSec team protects Affirm’s systems and data from evolving threats. They manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Their goal is to ensure that security is built into every system and decision at Affirm.

As a Senior Technical Program Manager, you will lead programs that protect Affirm’s products, systems, and data. Partnering with Information Security, IT, and Engineering, you will turn complex security priorities into clear plans, drive delivery across teams, and achieve measurable improvements in security and operational health.

Responsibilities:

• Lead technical security programs from planning through delivery, aligning Information Security, IT, Engineering, Infrastructure, and Product partners on scope, milestones, ownership, and outcomes.
• Partner with security leads to translate priorities and risk assessments into executable roadmaps, balancing risk reduction with engineering capacity and business needs.
• Engage in architecture reviews and threat modeling discussions, ask questions that clarify technical tradeoffs, and translate security requirements into concrete engineering deliverables.
• Manage dependencies, risks, and delivery commitments across teams, resolve blockers, and escalate decisions early with clear options and recommendations.
• Coordinate remediation of vulnerabilities and security findings, helping teams meet agreed service levels and establish sustainable plans for complex or long-term issues.
• Establish practical planning, review, and decision-making processes that clarify accountability and improve execution as security programs scale.

Requirements:

• 8+ years of experience leading complex technical programs, including delivery of information security initiatives across multiple teams.
• Practical experience in one or more security domains, such as product or platform security, identity and access management, vulnerability management, or risk assessment.
• Ability to turn ambiguous goals into achievable plans with clear milestones, dependencies, owners, and success measures.
• Experience improving program delivery through practical processes and meaningful metrics.
• Ability to build trust and influence without direct authority, align partners with competing priorities, and communicate complex technical topics clearly across a distributed organization.

Benefits:

• Base pay range: CAD $128,000 - $188,000 per year
• 100% subsidized medical coverage, dental and vision for you and your dependents
• Monthly stipends for health, wellness and tech spending
• Employee stock purchase plan (ESPP)
• Flexible time off and generous holiday calendars

Location: Remote Canada (open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan)