Embedded IT Risk & Controls Lead for AI Cloud

Nebius; Berlin (NH); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Competitive pay

Career growth

Flexibility & ownership

Collaborative culture

Impactful AI projects

International teams

Job summary

Nebius is seeking an IT Risk & Controls Manager to act as an embedded risk partner for our engineering and technology organizations. You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.

This role requires deep IT risk and control expertise with hands-on in-house technology experience.

Qualifications

• At least eight years of progressive experience in IT risk, IT controls, IT SOX.
• Meaningful in-house technology or corporate ownership experience is required.
• Hands-on experience in an engineering-led technology, cloud, SaaS environment.
• Strong knowledge of SOX 404, ITGCs, IT application controls, COSO and COBIT.
• Ability to communicate effectively with engineers, leaders, Finance and external auditors.
• Willingness to travel and collaborate across international time zones.

Responsibilities

• Act as the risk and controls partner for an assigned technology organization or system portfolio, understanding architecture, operations, risks and dependencies.
• Own and improve IT risk and control framework; scoping, risk assessment, RCM, controls catalog, documentation and ownership.
• Lead IT SOX readiness for assigned systems, including walkthroughs, evidence review, testing coordination and remediation oversight.
• Partner with engineering, platform, infrastructure, security and corporate IT to design scalable controls that balance risk and efficiency.
• Design, assess and enhance ITGCs across access, change management, SDLC, operations and third-party services.
• Assess IT application controls and automated controls, ensuring accuracy of system-generated information for business controls.
• Evaluate how business controls depend on systems and configurations; close gaps with owners.

Skills

IT risk

IT controls

IT SOX

COSO

COBIT

Cloud

DevOps

CI/CD

Kubernetes

English

Audit

Education

Information Systems or CS/Engineering/Accounting degree

Tools

Workiva

Jira

ServiceNow GRC

Job description

Nebius is seeking an IT Risk & Controls Manager to act as an embedded risk partner for our engineering and technology organizations. You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.

This role requires deep IT risk and control expertise with hands-on in-house technology experience.