About the roleRiot Platforms is seeking a Director of Data Security to lead the strategy and execution of our enterprise data protection and AI security programs. This leader will define how sensitive information is discovered, classified, protected, and securely shared across our corporate, cloud, and AI/HPC environments, as well as with third parties and customers.
This is a hands-on technical leadership role. You'll build a team and a scalable, risk-based program that safeguards critical business information while enabling operational efficiency and growth.
This position will be remote with travel to Riot offices as needed.
What you'll do - Develop and execute the enterprise data protection and AI security strategy, roadmap, and operating model, with measurable KPIs that drive continuous improvement.
- Build and lead a team of data protection and AI security engineers.
- Lead the architecture and optimization of Microsoft Purview, setting enterprise classification, labeling, and DLP standards with data owners.
- Prevent data loss with risk-based controls that stop unauthorized transfers to personal email, unmanaged cloud storage, removable media, and unapproved AI applications.
- Define AI security architecture and requirements for generative AI, LLMs, AI agents, and AI-enabled SaaS, including least privilege, tool permissions, and approval controls for sensitive actions.
- Lead cybersecurity's role in AI governance, setting assessment requirements for AI tools and vendors and partnering with Legal, GRC, and IT on approved applications and acceptable use.
- Meet security, privacy, regulatory, and contractual obligations through data handling standards and risk-based exceptions that balance protection with business needs.
- Partner with Security Operations and Incident Response to detect and investigate data exfiltration, insider threats, and AI-related incidents, using automation and metrics to improve DLP effectiveness.
What you'll have- Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent experience.
- 10+ years of cybersecurity experience, including 5+ years in data protection, security engineering, or cloud security, and 3+ years of technical leadership or people management.
- Hands-on experience designing and operationalizing Microsoft Purview in enterprise production environments: Information Protection, DLP, Endpoint DLP, Insider Risk Management, and DSPM.
- Strong understanding of AI security risks and controls, with experience securing Microsoft 365 Copilot, Copilot Studio, Azure AI, or comparable platforms.
- Strong knowledge of Microsoft 365, Entra ID, cloud, endpoint, and identity security, and tools such as CrowdStrike, Zscaler, Microsoft Defender, and SIEM.
- Knowledge of NIST CSF, NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, SOC 2, and ISO 27001.
- Proven strategic leadership and stakeholder management skills, with the ability to translate security risks into actionable engineering priorities.
- Preferred: CISSP, CISM, or Microsoft SC-401 certification and AI/HPC, cloud-native, or data center experience.
Compensation and Benefits- Competitive Salary: Base salary of $160,000-$180,000 (commensurate with experience) + bonus + sign-on equity grant.
- Long-Term Growth: Eligible to participate in Riot's equity incentive programs and share in the success you help build.
- 401(k) Retirement Plan: Incudes a generous company match.
- Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
- Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work.
