Top Tech Jobs & Startup Jobs in Boston, MA

Owns Riot’s unified compliance controls framework, including ISO 27001, SOC 2, NIST CSF, and SOX ITGC mapping. Leads control testing, evidence collection, issues and remediation management, GRC platform selection and administration, and compliance automation. Partners with IT, Security Engineering, mining sites, and data centers to implement and evidence enterprise and operational controls. The role requires hands-on platform configuration, integrations, automated evidence pipelines, and year-round audit readiness.

Owns Riot’s risk management and GRC execution, including SOC 1 and SOC 2 audits, ISO 27001 certification readiness, SOX ITGC coordination, enterprise risk registers, KRI/KPI reporting, POA&M remediation, auditor relationships, and continuous audit readiness. The role partners with executives, Internal Audit, external auditors, mining sites, and data center leadership to identify, quantify, report, and remediate operational and technology risks.

Build and own Riot’s governance program, including the ISO 27001:2022 documentation framework, enterprise policy library, regulatory horizon scanning, contracts management, third-party risk management, and framework mappings across SOC 2, SOX, NIST CSF, and applicable regulations. The role drives policy adoption, attestation, vendor due diligence, contract risk workflows, and alignment of site-level operational, physical security, and environmental policies.

Leads global category strategy, strategic sourcing, supplier development, commercial negotiations, and supply-chain resiliency for hyperscale data-center cooling infrastructure. Manages substantial spend across chillers, CRAHs, AHUs, containment, liquid cooling, and related systems. Partners with engineering, operations, and construction teams; develops supplier capacity; mitigates supply risks; monitors commodity markets and refrigerant regulations; and presents recommendations to executive stakeholders.

Provides in-house legal support for corporate finance transactions, strategic initiatives, securities, governance, and complex commercial matters. Responsibilities include drafting and reviewing financing documents, coordinating with outside counsel and stakeholders, managing transaction closings and post-closing activities, supporting business development, and improving legal processes. Requires a JD, active U.S. state bar membership, and at least three years of relevant corporate or transactional legal experience.

Lead Riot's multi-discipline data center engineering organization (mechanical, electrical, controls), set technical standards and QA/QC, approve designs at key milestones, oversee consultants and vendors, develop engineering talent, and represent engineering in cross-functional and executive decision-making.