Affirm: Reinventing Credit to Enhance Consumer Experience
Affirm, a leading financial technology company, is making significant strides in reinventing credit to make it more honest and user-friendly. The company is giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. The aim is to transform the traditional financial sector by establishing a more transparent, accessible, and customer-friendly credit system. As part of their comprehensive plan, Affirm is set to appoint a Chief Information Security Officer (CISO) to lead their information security and cybersecurity programs.
The Role of a CISO at Affirm
The CISO will play a crucial role in Affirm’s Executive Management Team. The main responsibility of the CISO will be to design and implement an enterprise-wide security framework that meets FDIC and state regulatory expectations, supports the Bank’s risk appetite, and protects customer and institutional data as the Bank prepares to launch as a de novo Industrial Loan Company (ILC). The CISO will also be responsible for developing information security governance, technical controls, and third-party risk oversight, ensuring a robust and scalable security posture from inception through growth.
Key Responsibilities
The appointed CISO will be tasked with several responsibilities. These include developing the Information Security Program, managing cybersecurity and threat management, overseeing third-party and affiliate risk, ensuring data governance and privacy protection, leading business continuity and resilience initiatives, and preparing for de novo and pre-opening readiness. The CISO will also spearhead the creation of a security-conscious culture within the organization, providing training and guidance to enhance information security awareness across all departments.
What Affirm Looks for in a CISO
The ideal candidate for the CISO position will have a minimum of 10 years of information security and technology risk management experience, with at least 5 years in a leadership capacity at a regulated financial institution or Fintech. The candidate should also have a proven track record of designing and implementing information security programs compliant with FDIC and FFIEC standards. Strong leadership, analytical, and problem-solving skills with a risk-based and pragmatic approach to decision-making are also essential for this role.
Core Competencies
As a part of the core competencies, the CISO should have expert knowledge of information security principles, frameworks, and regulatory requirements. They should also be strategic thinkers with strong operational execution and control discipline. Effective communication skills and the ability to influence across technical and business functions are also crucial. Lastly, the CISO should be a collaborative leader who fosters a culture of accountability, awareness, and continuous improvement.
Affirm’s Values and Benefits
Affirm lives by its values, which include People Come First, No Fine Print, It’s On Us, Simplify, and Push the Envelope. The CISO is expected to embody these principles while building the foundation of Affirm Bank as a trusted, transparent, and innovative financial institution. The company offers a competitive compensation package that includes monthly stipends for health, wellness and tech spending, and benefits include 100% subsidized medical coverage, dental and vision for employees and their dependents. The employees may also be eligible for equity rewards offered by Affirm Holdings, Inc.
For more information, please visit the original job posting Here.
