Director of Data Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and implement the enterprise data protection and AI security strategy, roadmap, and operational model.

• Develop measurable KPIs to foster ongoing improvement.

• Assemble and lead a team of engineers specializing in data protection and AI security.

• Oversee the architecture and enhancement of Microsoft Purview.

• Collaborate with data owners to establish enterprise classification, labeling, and DLP standards.

• Mitigate data loss through risk-based controls that encompass personal email, unmanaged cloud storage, removable media, and unapproved AI applications.

• Define the AI security architecture and establish requirements for generative AI, LLMs, AI agents, and AI-enabled SaaS solutions.

• Implement least-privilege, tool-permission, and approval controls for sensitive actions involving AI.

• Direct cybersecurity’s involvement in AI governance.

• Establish assessment criteria for AI tools and vendor partnerships.

• Collaborate with Legal, GRC, and IT teams regarding approved applications and acceptable usage policies.

• Ensure compliance with security, privacy, regulatory, and contractual requirements through data-handling standards and risk-based exceptions.

• Partner with Security Operations and Incident Response teams to identify and investigate data exfiltration, insider threats, and AI-related incidents.

• Utilize automation and metrics to enhance the effectiveness of DLP initiatives.

• Travel to Riot offices as necessary.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field.

• Over 10 years of experience in cybersecurity.

• At least 5 years of experience in data protection, security engineering, or cloud security.

• A minimum of 3 years in a technical leadership or people management role.

• Practical experience in designing and operationalizing Microsoft Purview within enterprise production settings, covering Information Protection, DLP, Endpoint DLP, Insider Risk Management, and DSPM.

• Experience in securing Microsoft 365 Copilot, Copilot Studio, Azure AI, or similar platforms.

• Strong understanding of Microsoft 365, Entra ID, cloud, endpoint, and identity security.

• Familiarity with CrowdStrike, Zscaler, Microsoft Defender, and SIEM tools.

• Knowledge of frameworks such as NIST CSF, NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, SOC 2, and ISO 27001.

• Demonstrated strategic leadership and stakeholder management capabilities.

• Preferred: CISSP, CISM, or Microsoft SC-401 certification.

• Preferred: Experience in AI/HPC, cloud-native environments, or data center operations.

• Ability to work remotely within the United States.

🏝️ Benefits

• Bonus opportunities.

• Sign-on equity grant.

• Eligibility to participate in Riot’s equity incentive programs.

• 401(k) retirement plan with a generous company match.

• Multiple medical plan options, including fully company-paid plans.

• Complimentary gym memberships.

• Pet insurance coverage.

• Discounts on childcare services.