Description
Nebius is seeking an IT Risk & Controls Manager to act as an embedded risk partner to its engineering and technology organisations.
The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You will work directly with engineering leaders, system owners, Finance, Internal Controls, and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation, and embed compliance into the way technology organisations operate.
Responsibilities:
- Act as the risk and controls partner for an assigned technology organisation or system portfolio
- Own and continuously improve the relevant IT risk and control framework
- Lead IT SOX readiness for assigned systems
- Partner with engineering, platform, infrastructure, security, and corporate IT teams to design and implement scalable controls
- Design, assess, and enhance ITGCs across various areas
- Assess IT application controls, automated controls, and IT-dependent business controls
- Evaluate how business controls depend on systems, integrations, configurations, reports, and underlying ITGCs
- Apply risk and controls thinking to modern engineering practices
- Lead the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations, and acquisitions
- Review third-party assurance reports and determine the impact of vendor controls and complementary user-entity controls on the Nebius control environment
- Maintain effective working relationships with external auditors and advisers
- Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners
- Use data analytics, automation, continuous monitoring, and AI-assisted tools to improve control coverage, evidence quality, and the efficiency of the IT SOX program
- Contribute to the development of IT controls methodology, standards, tooling, training, reporting, and the broader Risk Partner operating model
- Provide clear, concise updates on control health, audit readiness, deficiencies, and remediation progress to senior technology and Finance stakeholders
Requirements:
- A degree in Information Systems, Computer Science, Engineering, Accounting, Finance, or a related discipline
- At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit, or a closely related area
- Meaningful in-house technology or corporate ownership experience
- Experience working in a first-line technology, engineering, systems, or IT operations role, or as an embedded in-house risk partner supporting a technology organisation
- Hands-on experience in an engineering-led technology, cloud, SaaS, platform, or digital-product environment
- Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO, and COBIT
- Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation, and remediation
- Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations, and container orchestration
- Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs, and underlying IT dependencies
- The ability to communicate effectively with engineers, technical leaders, Finance stakeholders, and external auditors
- Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions
Benefits & Perks:
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams