• Support the execution of Alpaca’s cybersecurity risk management program • Conduct cyber risk assessments across cloud infrastructure, APIs, trading systems, and internal platforms • Assist in identifying, documenting, and evaluating AI-related risks (model risk, data privacy, bias, explainability, adversarial threats, model misuse) • Help develop and maintain AI governance controls aligned with evolving regulatory expectations, such as the EU AI Act • Perform third-party/vendor security and AI risk assessments • Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards • Track remediation efforts and maintain risk registers and reporting dashboards • Support internal and external audits by preparing documentation and evidence • Monitor regulatory developments related to cybersecurity, financial services, and AI governance • Help mature policies, standards, and procedures for both cyber and AI domains.