# IT Risks & Control Manager **Company**: Nebius **Location**: Spain **Experience**: senior **Job type**: full-time **Category**: IT **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/nebius/jobs/4941900101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_1b5d3da0-c67 ## Description Nebius is seeking a IT Risk & Controls Manager to act as an embedded risk partner to its engineering and technology organisations. The successful candidate will help scale and strengthen a modern IT SOX and controls framework across Nebius's custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting. Responsibilities include: - Acting as the risk and controls partner for an assigned technology organisation or system portfolio - Owning and continuously improving the relevant IT risk and control framework - Leading IT SOX readiness for assigned systems - Partnering with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls - Designing, assessing and enhancing ITGCs across various areas - Assessing IT application controls, automated controls and IT-dependent business controls - Evaluating how business controls depend on systems, integrations, configurations, reports and underlying ITGCs - Applying risk and controls thinking to modern engineering practices - Leading the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions - Reviewing third-party assurance reports and determining the impact of vendor controls and complementary user-entity controls on the Nebius control environment - Maintaining effective working relationships with external auditors and advisers - Translating complex technical risks and auditor requirements into practical guidance for engineering and system owners - Using data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program - Contributing to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model - Providing clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders. Requirements: - A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience - At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area - Meaningful in-house technology or corporate ownership experience - Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organisation - Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment - Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT - Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation - Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes - Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies - The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors - Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions - A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities - Strong written and verbal English - The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders. Nice to have: - A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification - Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company - Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment - Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms - Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems - Experience onboarding acquired companies or newly implemented systems into SOX scope - Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance - Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations. Benefits & Perks: - Competitive compensation - Career growth and learning opportunities - Flexibility and ownership - Collaborative and innovative culture - Opportunity to work on impactful AI projects - International environment and talented teams ## Skills ### Required - SOX 404 - ITGCs - IT application controls - automated controls - COSO - COBIT - cloud infrastructure - IAM - DevOps - CI/CD - SDLC - Kubernetes - data analytics - automation - continuous monitoring - AI-assisted tools ### Nice to have - CISA - CRISC - CISM - CIA - CPA - GRC and audit-management tools - enterprise SaaS and financial systems - control automation - AI governance - AI/ML control environments --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/nebius/jobs/4941900101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)