Cyber & AI Risk Analyst - Alpaca

About Alpaca

Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, and more. Serving hundreds of financial institutions across 40 countries, we are backed by $400 million in funding from top-tier investors. Our team of 400+ is globally distributed, and we are looking for passionate individuals to help us scale.

The Role

As a Cyber & AI Risk Analyst, you will play a critical role in strengthening Alpaca’s security, compliance, and AI risk posture. Reporting to the Cyber GRC Lead, you will support the identification, assessment, and documentation of cybersecurity and AI-related risks across our infrastructure, products, and internal operations.

This role sits at the intersection of cybersecurity, emerging AI governance, and financial services risk management. You will collaborate with Engineering, Product, Legal, and Compliance teams to ensure Alpaca remains resilient and forward-looking.

Key Responsibilities

• Cyber Risk Management: Execute the cybersecurity risk management program and conduct assessments across cloud infrastructure, APIs, and trading systems.
• AI Governance: Identify and evaluate AI-related risks (model bias, data privacy, adversarial threats) and help develop controls aligned with frameworks like the EU AI Act.
• Compliance & Audits: Contribute to control testing (SOC 2, ISO 27001, NIST CSF) and support internal/external audits.
• Vendor Risk: Perform third-party and vendor security/AI risk assessments.
• Policy & Process: Mature policies and standards; maintain risk registers and reporting dashboards.
• AI Enablement: Support the safe use of AI-enabled developer tools and help build repeatable AI model evaluation processes.

Who You Are

• Experience: 1+ years in cybersecurity, risk management, IT audit, or GRC (internships and coursework welcome).
• Technical Foundation: Understanding of cybersecurity principles (cloud security, IAM, vulnerability management) and common frameworks (NIST, ISO, SOC 2).
• AI Curiosity: Familiarity with AI/ML concepts and a strong desire to grow AI fluency.
• Communication: Strong written skills with the ability to translate technical risks for non-technical stakeholders.
• Mindset: Highly organized, detail-oriented, and comfortable in a fast-paced, cross-functional environment.

Benefits

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time $500
• Monthly Stipend: $150 per month via Brex Card