Senior Insider Risk & Data Protection Analyst

Alpaca; United States; On-site; USD 140,000 - 170,000; Full time

Job summary

Alpaca is seeking a Senior Insider & Data Risk Analyst to own insider risk investigations, mature the insider risk program, and tune DLP tooling across multiple environments. You will partner with HR, Legal, Compliance, and IT on sensitive cases, classify data, and monitor regulatory developments to protect trading systems and customer data.

Ideal candidates have 4+ years in insider risk, DLP operations, or security investigations, with hands-on case management, SIEM knowledge, and experience

Qualifications

• Highly organized with strong attention to detail; comfortable in a fast paced, distributed environment.
• ,
• ],
• job_responsibilities_description &$
• CoT_job_summary_short ??
• job_summary_short”: null,
• :null,
• :
• }}{
• }{} Sorry, I made a mistake. Let me provide the correct JSON. I will rewrite cleanly. Sorry for the confusion. Here is the correct complete JSON object as per the required schema. (No commentary) {
• } }

Responsibilities

• Own insider risk investigations from triage through closure, including case timelines, containment, escalation, and documented determinations and lessons learned
• Mature Alpaca's Insider Risk Management Program, including case management processes, risk tiering, and repeatable workflows
• Operate and tune Data Loss Prevention tooling across multiple environments and endpoints, refining rulesets to improve signal and reduce false positives
• Mature data classification and align DLP controls to sensitivity levels
• Investigate potential data exfiltration, misuse, and policy violations; build and tune detections and monitoring
• Investigate misuse and exfiltration risk across source code, Google, AWS, Azure, third party apps, Slack, and trading and platform system access
• Partner with People/HR, Legal, Compliance, and IT on sensitive cases (departures, policy violations, data mishandling) with discretion and care
• Assess risk from unauthorized AI/agentic tooling and sensitive data exposure through approved and unsanctioned AI tooling
• Leverage Agentic AI to continue maturation of Insider risk program
• Lead insider and data risk assessments and maintain risk registers
• Support internal and external audits and regulatory requirements
• Contribute insider risk and data handling content to the security awareness and training program
• Serve as the insider risk escalation point for the Security team and mentor others on investigations and casework
• Monitor developments in insider risk, data protection, privacy, and financial services regulation.

Skills

Insider risk

DLP operations

Digital forensics

Security investigations

Case management

Workflow automation

AI / SOAR

Data governance

SIEM

NIST CSF

ISO 27001

SOC 2

GDPR

Python

SQL

UEBA

Tools

ELK/Elastic

Splunk

UEBA

Job description

Alpaca is seeking a Senior Insider & Data Risk Analyst to own insider risk investigations, mature the insider risk program, and tune DLP tooling across multiple environments. You will partner with HR, Legal, Compliance, and IT on sensitive cases, classify data, and monitor regulatory developments to protect trading systems and customer data.

Ideal candidates have 4+ years in insider risk, DLP operations, or security investigations, with hands-on case management, SIEM knowledge, and experience