ABOUT THE ROLE

The Cybersecurity, Partner is Hut 8’s senior security leader and enterprise owner for cybersecurity strategy, architecture, governance, and risk. This role defines the security vision and operating model across corporate IT, mining operations, data centers, cloud, and AI/compute environments, and translates that vision into a practical roadmap for a rapidly scaling, publicly traded company.

This is a builder-leader role for an experienced security executive who can operate credibly with the board, executive leadership, technology teams, and operational stakeholders. The Partner will establish the security program from the ground up, set the control framework, lead material incident and risk decisions, manage the external security ecosystem, and build the internal capability required to progressively bring security operations and ownership in-house.

The role reports into the Technology organization and partners closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Finance, Legal, People, and Mining Operations.

What You'll Do

• Define and own Hut 8’s enterprise cybersecurity strategy, target operating model, multi-year roadmap, and security architecture.
• Establish clear security priorities, decision rights, risk tolerances, investment requirements, and success measures for the organization.
• Serve as the senior cybersecurity advisor to executive leadership and the board, providing clear reporting on material risks, incidents, control maturity, and remediation progress.
• Establish and govern the enterprise security control framework, aligning to recognized standards and obligations such as NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, and applicable regulatory requirements.
• Own the cybersecurity governance, risk, and compliance program, including risk acceptance, control ownership, evidence management, audit readiness, third-party assessments, and remediation tracking.
• Set the defense-in-depth architecture across identity and access management, network segmentation, endpoint security, cloud, SaaS, data, APIs, CI/CD pipelines, and OT or industrial control environments.
• Define security-by-default principles and embed them into technology strategy, architecture review, procurement, solution design, and the system development lifecycle.
• Build and lead the Security Operations capability, including threat detection, monitoring, security engineering, vulnerability management, incident response, and security metrics.
• Own the identity and access governance program, including privileged access, MFA, SSO, least privilege, joiner-mover-leaver controls, access reviews, and segregation of duties.