Director, OT Security

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who we are

At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. 

We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.

About the role

Riot Platforms is seeking an experienced Director of Operational Technology (OT) Security to lead the strategy, architecture, engineering, and execution of our OT cybersecurity program across our Bitcoin mining operations, industrial infrastructure, and expanding AI/HPC data center environments.

This leader will be responsible for protecting the operational technologies that support Riot's critical infrastructure, including industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, building management systems (BMS), electrical power management systems (EPMS), industrial networks, and other facility automation and control technologies.

This is a hands-on leadership role responsible for establishing standardized, scalable, and risk-based security capabilities that protect Riot's operational infrastructure while prioritizing safety, reliability, and business continuity. As Riot expands its AI/HPC data center operations, this leader will play a critical role in embedding cybersecurity into the design, construction, commissioning, and ongoing operations of next-generation infrastructure.

This position will be based in our Castle Rock, Colorado office.

What you'll do

• Develop and execute the enterprise OT security strategy, roadmap, and operating model, aligning investments with operational risk and growth and reporting on metrics and risk.
• Build and lead a dedicated OT security engineering function.
• Design secure OT architectures using defense-in-depth and the Purdue Model, including segmentation, security zones, secure IT/OT connectivity, and hardened configurations for PLCs and industrial network equipment.
• Establish OT asset visibility and risk-based vulnerability management, with compensating controls for systems that can’t be patched without operational disruption.
• Secure access for operators, engineers, contractors, and vendors through privileged access management, vendor remote access controls, and session monitoring, reducing shared credentials and excess privileges.
• Build OT threat detection and incident response, integrating OT telemetry with Security Operations and developing playbooks, tabletop exercises, and recovery procedures that prioritize safety and continuity.
• Define OT security requirements for new AI/HPC data centers from design through commissioning, covering power, cooling, building automation, and vendor and integrator standards.
• Set OT security policies, risk assessments, and supply chain requirements with GRC, Procurement, Legal, and Internal Audit, translating complex risks into clear recommendations for executives.

What you'll have

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, IT, or equivalent experience.
• 10+ years of experience in cybersecurity, infrastructure, or OT engineering, including 5+ years in OT/ICS security and 3+ years in technical leadership or management.
• Hands-on experience securing production OT/ICS environments, including industrial networks, firewalls, and protocols such as Modbus, BACnet, and OPC UA.
• Experience securing critical infrastructure, preferably hyperscale or AI/HPC data centers, Bitcoin mining, utilities, or power infrastructure.
• Knowledge of DCIM, industrial IoT, and automation platforms from Schneider Electric, Siemens, and Rockwell Automation.
• Experience with OT security platforms (Armis, Claroty, Nozomi), enterprise security tools (CrowdStrike, Zscaler, Palo Alto, Fortinet), and SIEM integrations; familiarity with security automation and Infrastructure as Code.
• Strong understanding of NIST SP 800-82, ISA/IEC 62443, NIST CSF, SOC 2, and ISO 27001, as well as operational safety and change management.
• Strong technical leadership, troubleshooting, communication, and cross-functional collaboration skills.
• Preferred certifications: GICSP, GRID, GCIP, CISSP, CISM, or ISA/IEC 62443 credentials.

Compensation and Benefits 

• Competitive Salary: $180,000-$200,000 (commensurate with experience) + bonus + sign-on equity grant. 
• Long-Term Growth: Eligible to participate in Riot’s equity incentive programs and share in the success you help build. 
• 401(k) Retirement Plan: Incudes a generous company match. 
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans. 
• Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work. 

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.