# Cyber & AI Risk Analyst

**Company:** [Alpaca](https://hotfix.jobs/companies/alpaca)
**Location:** Remote
**Role:** Other
**Experience:** 1+ years
**Skills:** Cybersecurity, Risk Management, GRC, nist csf, ISO 27001, SOC 2, ai governance, Cloud Security, IAM, Vulnerability Management, eu ai act, nist ai rmf, GCP
**Posted:** 2026-07-27

> Cyber & AI Risk Analyst supporting cybersecurity risk assessments, AI governance controls, and compliance for a fintech brokerage platform. Requires foundational cyber knowledge, understanding of AI risks, and strong communication skills; 1+ years experience preferred but internships welcome.

## Job Description

## Responsibilities
- Support the execution of Alpaca’s cybersecurity risk management program
- Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms
- Identify, document, and evaluate AI-related risks (model risk, data privacy, bias, explainability, adversarial threats, model misuse)
- Develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act
- Perform third-party/vendor security and AI risk assessments
- Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards
- Track remediation efforts and maintain risk registers and reporting dashboards
- Support internal and external audits by preparing documentation and evidence
- Monitor regulatory developments related to cybersecurity, financial services, and AI governance
- Mature policies, standards, and procedures for both cyber and AI domains
- Develop a repeatable AI tool/model evaluation process (intake → review → decision) for new and in-use AI tools
- Support Alpaca's AI usage guidance and standards, including safe use of AI-enabled developer tools and assistants
- Maintain AI logging/monitoring standards (audit logging, evidence) for AI systems
- Use AI tools in day-to-day work and help test how well AI-related controls are working

## Requirements
- 1+ years of experience in cybersecurity, risk management, IT audit, GRC, or a related field (internships, coursework, or equivalent experience welcome)
- Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management)
- Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar
- Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc.)
- Strong written communication and documentation skills
- Ability to assess technical risks and clearly communicate them to non-technical stakeholders
- Experience working cross-functionally with engineering and product teams
- Highly organized with strong attention to detail
- Comfort working in a fast-paced environment
- Genuine curiosity about AI and a strong desire to learn; actively experiments with AI tools
- Comfort using AI tools daily and willingness to learn newer agentic/assistant-based tooling

## Nice-to-Haves
- Academic background, personal interest, or real world experience in fintech, financial services, or trading platforms
- Exposure to AI governance, model risk management, or responsible AI programs
- Familiarity with emerging AI regulatory frameworks (e.g., NIST AI RMF, EU AI Act concepts, model governance practices)
- Experience with GCP or other major cloud platforms
- Experience supporting or observing SOC 2, ISO 27001, or regulatory audits
- Security certifications (e.g., Security+, SSCP) or early-stage GRC certifications
- Interest in pursuing advanced certifications (CISA, CRISC, CISSP, or AI governance certifications)
- Experience working remotely or in distributed teams
- Hands-on experience with AI/agentic tooling (e.g., AI coding assistants, LLM apps, or similar)
- Personal projects or self-study in AI/ML that show initiative and interest

## Compensation & Benefits
- Competitive Salary & Stock Options
- Health Benefits
- New Hire Home-Office Setup: One-time USD $500
- Monthly Stipend: USD $150 per month via a Brex Card

## Similar roles

- [Mathematician, Foundation Team](https://hotfix.jobs/jobs/07720cc8-3123-4042-a615-87434a99ae4a) - Hilbert - San Francisco, CA
- [U.S. Public Policy and AI Innovation Intern](https://hotfix.jobs/jobs/a292e21d-b58e-4863-a281-0583ae4c8185) - Cloudflare - Washington, DC - $50k – $50k/yr
- [Associate, Financial Benefits](https://hotfix.jobs/jobs/73b5897c-832b-4c78-aaf1-66ea7e3e7627) - Justworks - Remote - $63k – $82k/yr
- [Purchasing Coordinator](https://hotfix.jobs/jobs/b19e0220-4ab4-4800-9d96-cf327470b909) - Crusoe - Denver, CO - $71k – $79k/yr
- [Dialership Program](https://hotfix.jobs/jobs/d4f3d51f-85f5-469f-83b4-d68d6fb393b5) - Dialpad - Remote

**Apply:** https://hotfix.jobs/jobs/404e3745-a1c8-4adc-9200-5dd85f1a7bde
**Canonical:** https://hotfix.jobs/jobs/404e3745-a1c8-4adc-9200-5dd85f1a7bde