# Security Compliance Coordinator

**Company**: Nebius
**Location**: Tel Aviv
**Experience**: mid
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/nebius/jobs/4997919101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_56b3aa83-f0f

## Description

The Security Compliance Coordinator supports the day-to-day execution and scaling of Nebius' security compliance program. This hands-on role coordinates audits and certifications, performs control and evidence reviews, supports supplier compliance reviews within Third Party Risk Management (TPRM), and drives assigned actions to closure across multiple stakeholders.

**Responsibilities:**

- Compliance and Audit Operations:

- Coordinate external audits, certifications, and readiness activities, including SOC 2 and ISO-based programs.

- Perform recurring control testing and evidence reviews; identify gaps and inconsistencies and track findings, corrective actions, and remediation commitments through closure.

- Maintain organized, audit-ready records and provide clear status reporting on milestones, risks, dependencies, and overdue actions.

- TPRM and Supplier Compliance Reviews:

- Conduct compliance reviews of new and existing suppliers as part of the TPRM process.

- Identify missing, expired, or insufficient supplier evidence and material compliance gaps; coordinate clarifications and remediation and document the resulting assessment, decision, escalation, or accepted exception.

- Governance and Compliance Projects:

- Support the policy and procedure lifecycle, including inventory maintenance, owner coordination, scheduled reviews, approval tracking, publication, and reporting.

- Support the implementation and operation of the GRC platform, including workflows, evidence automation, integrations, data quality, reporting, and user adoption.

**Requirements:**

- 2-3 years of experience in information security compliance, GRC, IT audit, IT risk, or a closely related field.

- Working knowledge of information security controls, audit and certification cycles, and frameworks such as ISO 27001 or SOC 2.

- Ability to review evidence critically, identify missing or inconsistent information, and follow issues through to a clear and documented resolution.

- Strong organizational and English communication skills, with the ability to manage multiple workstreams and summarize requirements, findings, and status accurately.

- Proficiency with Jira, Confluence, and Excel or equivalent spreadsheet tools; experience with GRC platforms is an advantage.

## Skills

### Required
- information security compliance
- GRC
- IT audit
- IT risk
- ISO 27001
- SOC 2
- Jira
- Confluence
- Excel

### Nice to have
- TPRM
- supplier security or compliance assessments
- GRC platforms

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/nebius/jobs/4997919101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)