Cyber & AI Risk Analyst
Alpaca · Engineering · Junior · 3d ago
Open to candidates across EMEA.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across EMEA.
“Remote - EMEA”
Team of 400+ distributed across the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- $500 one-time home-office setup plus $150 monthly stipend via Brex card.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As a Cyber & AI Risk Analyst reporting to the Cyber GRC Lead, you will support the identification, assessment, and documentation of cybersecurity and AI-related risks across Alpaca's infrastructure, products, and internal operations. You will help design and execute risk management frameworks spanning cloud security, application security, vendor risk, and compliance, while also establishing foundational governance controls for AI systems and models.
What you'll do
- Conduct cyber and AI risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms.
- Help develop and maintain AI governance controls aligned with regulatory expectations such as the EU AI Act.
- Perform third-party/vendor security and AI risk assessments, tracking remediation efforts via risk registers.
- Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA STAR, and NIST CSF.
- Support internal and external audits by compiling documentation, evidence, and reporting dashboards.
- Help develop repeatable evaluation and monitoring processes for safe AI tool adoption and developer assistants.
What you bring
- 1+ years of experience in cybersecurity, risk management, IT audit, GRC, or related coursework/internships.
- Foundational understanding of cybersecurity principles like cloud security, IAM, network security, and vulnerability management.
- Familiarity with common compliance frameworks such as NIST CSF, ISO 27001, or SOC 2.
- Basic understanding of AI/ML concepts and associated risks like model bias, prompt injection, and hallucinations.
- Strong written communication and ability to translate technical risks for non-technical stakeholders.
- Curiosity and comfort using AI tools and emerging agentic workflows in day-to-day work.
About Alpaca
Alpaca is a developer-first brokerage infrastructure company providing APIs for stocks, options, crypto, and fixed income across more than 40 countries.
View Alpaca profile & open roles →