SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure serving hundreds of financial institutions across 40 countries. The company provides institutional-grade APIs for stocks, ETFs, options, crypto, and fixed income trading, supporting over 10 million brokerage accounts. Backed by $400M in funding from top-tier investors including Spark Capital and Y Combinator, Alpaca operates a globally distributed team of 400+ professionals.
As Senior Insider & Data Risk Analyst, you will own insider risk investigations and mature Alpaca's Insider Risk Management Program and Data Loss Prevention capabilities. Reporting to the Cyber GRC Lead, you serve as the Security team's escalation point for insider and data loss cases affecting trading systems, customer data, and proprietary information.
Key responsibilities include: triaging and investigating signals across people, devices, identity, and data movement; owning insider risk investigations from triage through closure with documented determinations; maturing case management processes, risk tiering, and repeatable workflows; operating and tuning Data Loss Prevention tooling across multiple environments to improve signal quality and reduce false positives; investigating potential data exfiltration, misuse, and policy violations across source code repositories, cloud platforms (AWS, Azure, Google), third-party applications, Slack, and trading systems; partnering with People/HR, Legal, Compliance, and IT on sensitive cases involving departures and policy violations; assessing risks from unauthorized AI/agentic tooling and sensitive data exposure; leading insider and data risk assessments and maintaining risk registers; supporting internal and external audits and regulatory requirements; and mentoring others on investigations and casework.
This is a practical senior individual contributor role requiring someone experienced, discreet, and highly organized who can translate risk into clear language for leadership and build durable programs. Prior experience in regulated or financial services environments is strongly preferred.
