Cyber Security, AI Risk Analyst

atAlpacaRemoteEurope Full-time Cybersecurity / Security EngineerJunior

Posted 5 hours ago

This is a fully remote position, open to applicants in Europe.

📋 Description

• Assist in the implementation of Alpaca’s cybersecurity risk management strategy.

• Perform cyber risk evaluations across cloud environments, APIs, trading platforms, and internal systems.

• Aid in the identification, documentation, and assessment of AI-related risks.

• Contribute to the development and upkeep of AI governance controls in line with changing regulatory requirements, such as the EU AI Act.

• Conduct security and AI risk assessments of third-party vendors.

• Participate in control testing for various frameworks, including SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging standards in AI governance.

• Monitor remediation actions and maintain risk registers and reporting dashboards.

• Assist with internal and external audits by preparing necessary documentation and evidence.

• Track regulatory changes related to cybersecurity, financial services, and AI governance.

• Help enhance policies, standards, and procedures for cybersecurity and AI sectors.

• Support a systematic evaluation process for AI tools/models, both new and in current use.

• Aid in the development of guidance and standards for AI usage at Alpaca.

• Assist in maintaining AI logging and monitoring standards for AI systems.

• Utilize AI tools in daily operations and assist in testing AI-related controls.

• Collaborate with teams in Engineering, Product, Legal, Compliance, and IT.

• Report directly to the Cyber GRC Lead.

⛳️ Requirements

• A minimum of 1 year of experience in cybersecurity, risk management, IT auditing, GRC, or a related discipline; internships, coursework, or equivalent experience are also considered.

• Basic understanding of cybersecurity principles, including network security, cloud security, IAM, application security, and vulnerability management.

• Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar standards.

• Understanding of AI/ML concepts and related risks, including data governance, model bias, hallucinations, prompt injection, and model misuse.

• Strong written communication and documentation abilities.

• Capability to evaluate technical risks and effectively communicate them to non-technical audiences.

• Experience collaborating across various functions with engineering and product teams.

• Highly organized with a keen attention to detail.

• Comfort in a fast-paced work environment.

• A genuine interest in AI, a strong desire to learn, and a proactive approach to experimenting with AI tools while aspiring to enhance AI fluency as the field progresses.

• Comfort in using AI tools on a daily basis and a willingness to learn about newer agentic or assistant-based tools.