Leads Riot’s enterprise Identity and Access Management program across corporate, cloud, data center, and operational environments. Responsibilities include IAM strategy, Microsoft Entra ID architecture, privileged access management, identity governance, least-privilege models, non-human identity controls, third-party access, automation, compliance, security monitoring, metrics, and leadership of IAM engineers and partners.

Designs, implements, and operates enterprise IAM solutions across Entra ID, Active Directory, cloud, SaaS, and data centers. Manages SSO, MFA, PAM, PIM, RBAC, identity governance, lifecycle controls, provisioning automation, third-party access, and non-human identities. Troubleshoots authentication and federation issues, supports identity-threat investigations, maintains technical documentation, and contributes to audit and compliance activities.

Owns Riot’s risk management and GRC execution, including SOC 1 and SOC 2 audits, ISO 27001 certification readiness, SOX ITGC coordination, enterprise risk registers, KRI/KPI reporting, POA&M remediation, auditor relationships, and continuous audit readiness. The role partners with executives, Internal Audit, external auditors, mining sites, and data center leadership to identify, quantify, report, and remediate operational and technology risks.