IT Risks & Control Manager

Role description

Role Overview

Nebius is seeking an IT Risk & Controls Manager to act as an embedded risk partner to our engineering and technology organizations. You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment, and other systems supporting financial reporting.

What You Will Do

Your responsibilities will include: Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks, and financial-reporting dependencies. Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM, and control-catalogue maintenance, documentation, and control ownership.

Why It Might Be a Fit

The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders, and aligning audit expectations with external assurance providers.

Requirements

• A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience.
• At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area.
• Meaningful in-house technology or corporate ownership experience is required.
• Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background will not be sufficient.
• Experience working in a first-line technology, engineering, systems, or IT operations role, or as an embedded in-house risk partner supporting a technology organization.
• Hands-on experience in an engineering-led technology, cloud, SaaS, platform, or digital-product environment.
• Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO, and COBIT.
• Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation, and remediation.
• Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations, and container orchestration such as Kubernetes.
• Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs, and underlying IT dependencies.
• The ability to communicate effectively with engineers, technical leaders, Finance stakeholders, and external auditors.
• Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions.
• A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities.
• Strong written and verbal English.
• The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams