Sr. Insider & Data Risk Analyst

Stack

Responsibilities

• ▹Own insider risk investigations from triage through closure, including case timelines, containment, escalation, documented determinations and lessons learned
• ▹Mature Alpaca's Insider Risk Management Program, including case management processes, risk tiering and repeatable workflows
• ▹Operate and tune Data Loss Prevention tooling across multiple environments and endpoints, refining rulesets to improve signal and reduce false positives
• ▹Mature data classification and align DLP controls to sensitivity levels
• ▹Investigate potential data exfiltration, misuse and policy violations; build and tune detections and monitoring
• ▹Investigate misuse and exfiltration risk across source code, Google, AWS, Azure, third-party apps, Slack, and trading and platform system access
• ▹Partner with People/HR, Legal, Compliance and IT on sensitive cases with discretion and care
• ▹Assess risk from unauthorized AI/agentic tooling and sensitive data exposure through approved and unsanctioned AI tooling
• ▹Leverage agentic AI to continue maturing the insider risk program
• ▹Lead insider and data risk assessments and maintain risk registers
• ▹Support internal and external audits and regulatory requirements
• ▹Contribute insider risk and data handling content to the security awareness and training program
• ▹Serve as the insider risk escalation point for the Security team and mentor others on investigations and casework
• ▹Monitor developments in insider risk, data protection, privacy and financial services regulation

Requirements

• ▹Highly organized with strong attention to detail; comfortable in a fast-paced, high-demand, distributed environment
• ▹4+ years in insider risk, DLP operations, digital forensics or security investigations, including hands-on case management on sensitive personnel matters
• ▹Hands-on experience leading investigations and case management with discretion, integrity and sound judgment
• ▹Hands-on experience operating DLP in SaaS and endpoint environments and tuning rules to improve signal quality
• ▹Experience with workflow automation, AI or SOAR platforms for alert triage and case orchestration
• ▹Solid understanding of data classification and data governance
• ▹Working knowledge of SIEM and log analysis (e.g., ELK/Elastic, Splunk) to support investigations
• ▹Familiarity with frameworks such as NIST CSF, ISO 27001, SOC 2 and privacy regulations (GDPR, APPI)
• ▹Strong written communication: clear investigation reports, case documentation and executive summaries
• ▹High integrity and discretion when handling confidential and sensitive information
• ▹Ability to work across People/HR, Legal, Compliance, Engineering and IT

Nice to have

• ▹Academic background, personal interest or real-world experience in fintech, financial services or trading platforms
• ▹Digital forensics or eDiscovery experience
• ▹Experience with UEBA or insider risk detection platforms
• ▹Scripting or automation for detections and data analysis (e.g., Python, SQL)
• ▹Experience with major cloud platforms
• ▹Experience supporting or observing SOC 2, ISO 27001 or regulatory audits
• ▹Certifications such as GCFA, GCFE, CISSP, CISM, CIPP, CFE or similar
• ▹Interest in AI-related data risk (e.g., data exposure through AI tools) and using AI tooling to work more efficiently
• ▹Familiarity with financial services regulatory expectations (e.g., SEC/FINRA, broker-dealer controls) and multi-jurisdiction privacy requirements
• ▹Experience in security operations or incident response

Soft skills

What we offer

• ▹Competitive salary and stock options
• ▹Health benefits
• ▹One-time home-office setup: USD 500
• ▹Monthly stipend: USD 150 via a Brex card

About the company

Alpaca is a US-headquartered global provider of brokerage infrastructure for stocks, ETFs, options, crypto and more. Its institutional-grade APIs serve financial institutions in 40 countries with over 10 million brokerage accounts; the team is 400+ globally distributed members.