Cyber & AI Risk Analyst (Fully Remote)

Alpaca; United States; Remote; USD 90,000 - 140,000; Full time

Job summary

Alpaca seeks a cybersecurity risk professional to support the execution of its risk management program across cloud infrastructure, APIs, and trading systems. You will help evaluate controls and ensure adherence to security standards in a fast-paced fintech environment.

You will also contribute to AI governance, perform third-party assessments, and assist with testing against SOC 2, ISO 27001, and NIST CSF, collaborating with cross-functional teams to strengthen Alpaca's security posture.

Responsibilities

• Support the execution of Alpaca’s cybersecurity risk management program and conduct risk assessments across cloud infrastructure, APIs, and trading systems.
• Help develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act.
• Perform third-party/vendor security and AI risk assessments, and contribute to control testing across frameworks like SOC 2, ISO 27001, and NIST CSF.

Job description

• Support the execution of Alpaca’s cybersecurity risk management program and conduct risk assessments across cloud infrastructure, APIs, and trading systems.
• Help develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act.
• Perform third-party/vendor security and AI risk assessments, and contribute to control testing across frameworks like SOC 2, ISO 27001, and NIST CSF.