Cyber Risk Analyst

Job Summary

Supporting the execution of Alpaca's cybersecurity risk management program, the full-time remote Cyber & AI Risk Analyst will assess cybersecurity and AI-related risks, develop governance controls, and collaborate with cross-functional teams to enhance security and compliance across the organization.

Key responsibilities

• Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms
• Assist in identifying, documenting, and evaluating AI-related risks and develop AI governance controls
• Support internal and external audits by preparing documentation and evidence related to cybersecurity and AI compliance

Required qualifications

• 1+ years of experience in cybersecurity, risk management, IT audit, GRC, or a related field
• Foundational understanding of cybersecurity principles and familiarity with common frameworks such as NIST CSF and ISO 27001
• Understanding of AI/ML concepts and associated risks
• Strong written communication and documentation skills
• Experience working cross-functionally with engineering and product teams