The role
Alpaca's Cyber GRC team needs an analyst to assess cyber and AI risks across its cloud, APIs and trading systems. You'll help set up AI governance from the ground up and support SOC 2 and ISO 27001 audits.
What you'll do
- Run cyber risk assessments across cloud, APIs and trading systems
- Identify and document AI risks such as model misuse, bias and privacy
- Help build AI governance controls aligned with rules like the EU AI Act
- Assess third-party vendors for security and AI risk
- Maintain risk registers and prepare audit evidence
What they're looking for
Must-haves
- 1+ years in cybersecurity, risk, IT audit or GRC; internships count
- Grasp of cloud security, IAM, app security and vulnerability management
- Familiarity with NIST CSF, ISO 27001 or SOC 2
- Understanding of AI/ML risks like hallucinations and prompt injection
- Clear written communication with non-technical stakeholders
Nice to have
- Exposure to AI governance or model risk management
- Security+ or SSCP, or early GRC certifications
- Fintech or trading platform background
Skills and platforms
- Cybersecurity
- Risk Management
- AI Governance
- Cloud Security
- GRC
- IT Audit
- Regulatory Compliance
- Data Privacy
- Model Risk Management
- NIST CSF
- ISO 27001
- SOC 2
- Vulnerability Management
- IAM
- Application Security
- Technical Documentation
Perks
- Competitive Salary
- Stock Options
- Health Benefits
- Home-Office Setup Stipend
- Monthly Stipend
The company
Alpaca
Financial Services
Alpaca is a US-headquartered, self-clearing broker-dealer and a global leader in brokerage infrastructure APIs providing access to stocks, ETFs, options, fixed income, and crypto.
Summarised by Jobs That Travel from Alpaca's listing.
