Owns Riot’s risk management and GRC execution, including SOC 1 and SOC 2 audits, ISO 27001 certification readiness, SOX ITGC coordination, enterprise risk registers, KRI/KPI reporting, POA&M remediation, auditor relationships, and continuous audit readiness. The role partners with executives, Internal Audit, external auditors, mining sites, and data center leadership to identify, quantify, report, and remediate operational and technology risks.