IT Risks & Control Manager

Nebius is seeking a IT Risk & Controls Manager to act as an embedded risk partner to its engineering and technology organisations.

The successful candidate will help scale and strengthen a modern IT SOX and controls framework across Nebius's custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.

Responsibilities include:

• Acting as the risk and controls partner for an assigned technology organisation or system portfolio
• Owning and continuously improving the relevant IT risk and control framework
• Leading IT SOX readiness for assigned systems
• Partnering with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls
• Designing, assessing and enhancing ITGCs across various areas
• Assessing IT application controls, automated controls and IT-dependent business controls
• Evaluating how business controls depend on systems, integrations, configurations, reports and underlying ITGCs
• Applying risk and controls thinking to modern engineering practices
• Leading the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions
• Reviewing third-party assurance reports and determining the impact of vendor controls and complementary user-entity controls on the Nebius control environment
• Maintaining effective working relationships with external auditors and advisers
• Translating complex technical risks and auditor requirements into practical guidance for engineering and system owners
• Using data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program
• Contributing to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model
• Providing clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.

Requirements:

• A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience
• At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area
• Meaningful in-house technology or corporate ownership experience
• Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organisation
• Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment
• Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT
• Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation
• Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes
• Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies
• The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors
• Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions
• A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities
• Strong written and verbal English
• The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.

Nice to have:

• A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification
• Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company
• Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment
• Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms
• Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems
• Experience onboarding acquired companies or newly implemented systems into SOX scope
• Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance
• Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations.

Benefits & Perks:

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams