R

Riot Platforms

Vertical-integrated Bitcoin mining and AI centers

Director of Data Security

Security Engineering & ArchitecturePosted on Nov 6
Full-timeRemote in USA

About the Job

Requirements

  • A bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent experience is required.
  • At least 10 years of cybersecurity experience, including at least 5 years in data protection, security engineering, or cloud security, and at least 3 years of technical leadership or people management experience.
  • Hands-on experience designing and operationalizing Microsoft Purview in enterprise production environments, including Information Protection, Data Loss Prevention (DLP), Endpoint DLP, Insider Risk Management, and Data Security Posture Management (DSPM).
  • Strong understanding of AI security risks and controls, with experience securing Microsoft 365 Copilot, Copilot Studio, Azure AI, or comparable platforms.
  • Strong knowledge of Microsoft 365, Entra ID, cloud, endpoint, and identity security, and tools such as CrowdStrike, Zscaler, Microsoft Defender, and Security Information and Event Management (SIEM).
  • Knowledge of NIST Cybersecurity Framework (NIST CSF), NIST AI Risk Management Framework (NIST AI RMF), OWASP LLM Top 10, MITRE ATLAS, SOC 2, and ISO 27001.
  • Proven strategic leadership and stakeholder management skills, with the ability to translate security risks into actionable engineering priorities.

Responsibilities

  • Develop and execute the enterprise data protection and AI security strategy, roadmap, and operating model, with measurable key performance indicators that drive continuous improvement.
  • Build and lead a team of data protection and AI security engineers.
  • Lead the architecture and optimization of Microsoft Purview, setting enterprise classification, labeling, and DLP standards with data owners.
  • Prevent data loss with risk-based controls that stop unauthorized transfers to personal email, unmanaged cloud storage, removable media, and unapproved AI applications.
  • Define AI security architecture and requirements for generative AI, large language models (LLMs), AI agents, and AI-enabled software as a service, including least privilege, tool permissions, and approval controls for sensitive actions.
  • Lead cybersecurity's role in AI governance by setting assessment requirements for AI tools and vendors and partnering with Legal, GRC, and IT on approved applications and acceptable use.
  • Meet security, privacy, regulatory, and contractual obligations through data handling standards and risk-based exceptions that balance protection with business needs.
  • Partner with Security Operations and Incident Response to detect and investigate data exfiltration, insider threats, and AI-related incidents, using automation and metrics to improve DLP effectiveness.

Desired Qualifications

  • CISSP, CISM, or Microsoft SC-401 certification.
  • AI/HPC, cloud-native, or data center experience.

About the Company

Riot Platforms

Vertical-integrated Bitcoin mining and AI centers

Riot Platforms builds and operates digital infrastructure centered on Bitcoin mining with a vertically integrated model that includes mining and engineering (ESS Metron). It runs large-scale ASIC mining facilities to validate Bitcoin transactions and earns revenue from mined coins, power credits, and engineering services. It differentiates itself by owning the full stack—hardware, power infrastructure, and engineering capabilities—and by repurposing capacity to offer HPC and AI data-center solutions alongside mining. Its goal is to grow its hash-rate and data-center footprint, using its energy assets to provide scalable infrastructure for large customers while diversifying beyond cryptocurrency mining.

Company size
51-200
Company stage
IPO
Headquarters
Castle Rock, CO
Founded
2000

Recently Posted Jobs

Explore more opportunities at Riot Platforms

See more jobs