Our company

  • Alpaca – US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading; licensed financial services company serving hundreds of institutions across 40 countries; strong open-source focus; 400+ global team.”],

Your position

  • Cyber & AI Risk Analyst – supports Alpaca's security, compliance, and AI risk posture; collaborates with Engineering, Product, Legal, Compliance, and IT; conducts cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms; identifies and documents AI-related risks; develops AI governance controls; performs third-party/AI risk assessments; contributes to control testing and risk/monitoring dashboards; supports audits; tracks regulatory developments; helps mature cyber/AI policies and procedures; uses AI tools in daily work and helps validate AI-related controls.

Requirements

  • 1+ years in cybersecurity, risk management, IT audit, GRC, or related field (internships or coursework acceptable); foundational cybersecurity knowledge (network, cloud, IAM, app security, vulnerability management); familiarity with frameworks (NIST CSF, ISO 27001, SOC 2); understanding of AI/ML concepts and risks (data governance, bias, hallucinations, prompt injection, model misuse); strong written communication; ability to assess and explain technical risk to non-technical stakeholders; cross-functional collaboration experience; highly organized with attention to detail; curious and eager to learn about AI.

Compensation & benefits

  • Competitive salary; Stock options; Health benefits; One-time USD $500 home-office setup; Monthly stipend USD $150 via Brex Card; Equal opportunity employer.