Owns Riot’s unified compliance controls framework, including ISO 27001, SOC 2, NIST CSF, and SOX ITGC mapping. Leads control testing, evidence collection, issues and remediation management, GRC platform selection and administration, and compliance automation. Partners with IT, Security Engineering, mining sites, and data centers to implement and evidence enterprise and operational controls. The role requires hands-on platform configuration, integrations, automated evidence pipelines, and year-round audit readiness.

Owns Riot’s risk management and GRC execution, including SOC 1 and SOC 2 audits, ISO 27001 certification readiness, SOX ITGC coordination, enterprise risk registers, KRI/KPI reporting, POA&M remediation, auditor relationships, and continuous audit readiness. The role partners with executives, Internal Audit, external auditors, mining sites, and data center leadership to identify, quantify, report, and remediate operational and technology risks.

Build and own Riot’s governance program, including the ISO 27001:2022 documentation framework, enterprise policy library, regulatory horizon scanning, contracts management, third-party risk management, and framework mappings across SOC 2, SOX, NIST CSF, and applicable regulations. The role drives policy adoption, attestation, vendor due diligence, contract risk workflows, and alignment of site-level operational, physical security, and environmental policies.