Cyber & AI Risk Analyst

The role

You will support the identification, assessment, and documentation of cybersecurity and AI-related risks. This includes executing risk management frameworks across cyber domains and establishing governance controls for AI systems.

What you will do

• Support the execution of Alpaca’s cybersecurity risk management program
• Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms
• Assist in identifying, documenting, and evaluating AI-related risks
• Help develop and maintain AI governance controls
• Perform third-party/vendor security and AI risk assessments
• Contribute to control testing across frameworks
• Track remediation efforts and maintain risk registers and reporting dashboards
• Support internal and external audits by preparing documentation and evidence
• Monitor regulatory developments related to cybersecurity, financial services, and AI governance
• Help mature policies, standards, and procedures for both cyber and AI domains

Required qualifications

• 1+ years of experience in cybersecurity, risk management, IT audit, GRC, or a related field
• Foundational understanding of cybersecurity principles
• Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar
• Understanding of AI/ML concepts and associated risks
• Strong written communication and documentation skills
• Ability to assess technical risks and clearly communicate them to non-technical stakeholders
• Experience working cross-functionally with engineering and product teams
• Highly organized with strong attention to detail
• Comfort working in a fast-paced environment
• Genuine curiosity about AI and a strong desire to learn
• Comfort using AI tools daily and willingness to learn newer agentic / assistant-based tooling

Nice to have

• Academic background, personal interest, or real world experience in fintech, financial services, or trading platforms
• Exposure to AI governance, model risk management, or responsible AI programs
• Familiarity with emerging AI regulatory frameworks
• Experience with GCP or other major cloud platforms
• Experience supporting or observing SOC 2, ISO 27001, or regulatory audits
• Security certifications (e.g., Security+, SSCP) or early-stage GRC certifications
• Interest in pursuing advanced certifications (CISA, CRISC, CISSP, or AI governance certifications)
• Experience working remotely or in distributed teams
• Hands-on experience with AI/agentic tooling
• Personal projects or self-study in AI/ML

Benefits

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card

About the company

Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. It is a licensed financial services company serving hundreds of financial institutions across 40 countries.