Director, GRC & Audit Strategy

Riot Platforms, Inc.; United States; On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

401(k) match

Equity grant

Health coverage

Wellness perks

Gym membership

Job summary

Riot Platforms, Inc. excels in digital infrastructure and operates a high‑impact GRC function. We seek a Director of Risk Management to own external audits, risk identification, and remediation across SOC, ISO 27001, and SOX ITGC, reporting to the Sr. Director, GRC and collaborating with CFO.

You will drive risk quantification, KPI/KRI frameworks, and a year‑round audit readiness posture across mining and data center operations. Join a fast-paced, security‑minded leadership team.

Qualifications

• 8–12+ years in GRC, IT audit, or enterprise risk management.
• Lead experience with SOC 1 and SOC 2 Type II audits.
• ISO 27001 Lead Implementer certification.
• Knowledge of SOX ITGC in a public company.

Responsibilities

• Own end-to-end SOC 1 and SOC 2 Type II audits and remediation tracking.
• Lead ISO 27001:2022 audit readiness and certification track.
• Coordinate SOX ITGC with Internal Audit and map controls.
• Build and maintain enterprise risk register and taxonomy.
• Develop KPI/KRI reporting for executive audiences.
• Manage POA&M program, ownership, and remediation cadence.
• Design repeatable evidence pipelines for year-round audit readiness.

Skills

SOC audits

ISO 27001 Lead

SOX ITGC

GRC program

Audit liaison

Risk management

Executive reporting

Job description

Riot Platforms, Inc. excels in digital infrastructure and operates a high‑impact GRC function. We seek a Director of Risk Management to own external audits, risk identification, and remediation across SOC, ISO 27001, and SOX ITGC, reporting to the Sr. Director, GRC and collaborating with CFO.

You will drive risk quantification, KPI/KRI frameworks, and a year‑round audit readiness posture across mining and data center operations. Join a fast-paced, security‑minded leadership team.