Alpaca

3 days ago

Cyber & AI Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Strengthen Alpaca’s security, compliance, and AI risk posture by supporting cybersecurity and AI risk identification, assessment, and documentation. Help design and execute a risk management framework across cloud, infrastructure, application security, third-party risk, and regulatory compliance, while establishing AI governance controls aligned to evolving requirements like the EU AI Act. Collaborate with Engineering, Product, Legal, Compliance, and IT, and support audits with evidence and control testing.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Support execution of Alpaca’s cybersecurity risk management program.
•Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms.
•Identify, document, and evaluate AI-related risks including model risk, data privacy, bias, explainability, adversarial threats, and model misuse.
•Develop and maintain AI governance controls aligned with regulatory expectations such as the EU AI Act.
•Perform third-party/vendor security and AI risk assessments; contribute to control testing and support internal/external audits with documentation and evidence.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceEquityHome Office

Key Requirements

•1+ years of experience in cybersecurity, risk management, IT audit, GRC, or a related field (internships/coursework welcome).
•Foundational understanding of cybersecurity principles including network security, cloud security, IAM, application security, and vulnerability management.
•Familiarity with frameworks such as NIST CSF, ISO 27001, SOC 2, or similar.
•Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse).
•Strong written communication/documentation skills and the ability to communicate technical risks to non-technical stakeholders.

Experience:CybersecurityRisk managementGRCIT auditFintech

Skills:Written communicationDocumentationRisk communicationCross-functional collaborationAttention to detail

Certifications:Security+SSCPCISACRISCCISSP

Languages:English

Tech Stack:SOC 2ISO 27001CSA StarNIST CSFEU AI ActAI/ML

Company Brief

Alpaca

Provides developer-first APIs and brokerage infrastructure for algorithmic and automated stock trading, enabling fintechs and developers to build trading applications with commission-free market access and custody services.

Industry: Fintech Infrastructure

Company Size: Medium (51 to 250 employees)

Growth: Scaleup

Funding: Series C

Headquarters: San Mateo, United States

Founded: 2015

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Alpaca

3 days ago

Cyber & AI Risk Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 16 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Entry level

Key Responsibilities

•Support execution of Alpaca’s cybersecurity risk management program.
•Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms.
•Identify, document, and evaluate AI-related risks including model risk, data privacy, bias, explainability, adversarial threats, and model misuse.
•Develop and maintain AI governance controls aligned with regulatory expectations such as the EU AI Act.
•Perform third-party/vendor security and AI risk assessments; contribute to control testing and support internal/external audits with documentation and evidence.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceEquityHome Office

Key Requirements

•1+ years of experience in cybersecurity, risk management, IT audit, GRC, or a related field (internships/coursework welcome).
•Foundational understanding of cybersecurity principles including network security, cloud security, IAM, application security, and vulnerability management.
•Familiarity with frameworks such as NIST CSF, ISO 27001, SOC 2, or similar.
•Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse).
•Strong written communication/documentation skills and the ability to communicate technical risks to non-technical stakeholders.

Experience:CybersecurityRisk managementGRCIT auditFintech

Skills:Written communicationDocumentationRisk communicationCross-functional collaborationAttention to detail

Certifications:Security+SSCPCISACRISCCISSP

Languages:English

Tech Stack:SOC 2ISO 27001CSA StarNIST CSFEU AI ActAI/ML

Company Brief

Alpaca

Industry: Fintech Infrastructure

Company Size: Medium (51 to 250 employees)

Growth: Scaleup

Funding: Series C

Headquarters: San Mateo, United States

Founded: 2015

Website LinkedIn