• Lead, develop, and mentor the Platform Security team, setting direction, managing performance, and ensuring strong communication and execution across distributed time zones. • Design, implement, and operate cloud security controls for AWS, GCP, and Azure to protect infrastructure, services, and applications from evolving threats. • Partner with engineering and product leadership to influence architecture decisions, define security requirements, and ensure alignment with Affirm’s technical strategy. • Strengthen container security by guiding secure design and operation of containerized environments using Docker, Kubernetes, and related ecosystem tooling. • Drive adoption of DevSecOps practices by embedding automated security checks, workflows, and guardrails into CI/CD pipelines and developer tooling. • Communicate complex security risks, tradeoffs, and recommendations to technical and non-technical stakeholders with clarity, precision, and authority. • Develop and mature the platform security roadmap, identifying long-term risks, investments, and capabilities needed to strengthen Affirm’s cloud posture. • Define, maintain, and enforce baseline security configurations, standards, and operational processes for cloud platforms, systems, and applications. • Create and maintain security metrics and dashboards that provide meaningful insights into control effectiveness, program maturity, and areas needing investment. • Support budget planning, resource allocation, and team development, ensuring the program can scale effectively and deliver strong outcomes over time.