IT Risk & Controls Manager

<div class="content-intro"><p><strong>About Nebius:</strong></p> <p>Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.</p> <p>Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.</p> <p>Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.</p></div><h3><strong><span data-ccp-props="{}">The role</span></strong></h3> <p><span data-contrast="auto">Nebius is seeking a </span><span data-contrast="auto">IT Risk & Controls Manager</span><span data-contrast="auto"> to act as an embedded risk partner to our engineering and technology organizations.</span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.</span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">This role goes beyond traditional IT audit testing. You will work directly with engineering leaders, system owners, Finance, Internal Controls and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation and embed compliance into the way our technology organizations operate.</span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders and aligning audit expectations with external assurance providers.</span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":240,"335559739":240}"> </span></p> <p><strong><span data-contrast="auto"><span data-ccp-charstyle="Strong">Your responsibilities will include:</span></span></strong><span data-ccp-props="{"134233117":true,"134233118":true}"> </span></p> <ul> <li><span data-contrast="auto">Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls that address risk while supporting operational efficiency. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Design, assess and enhance ITGCs across areas such as user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Assess IT application controls, automated controls and IT-dependent business controls, including the completeness and accuracy of system-generated information used in business-process controls. </span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":false,"335551550":6,"335551620":6,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Evaluate how business controls depend on systems, integrations, configurations, reports and underlying ITGCs, and work with both business and I