IT Risks & Control Manager
Remote$120k - $180kfull-timePosted 2mo ago
About the role
Embedded IT risk partner to engineering and technology organizations, building and maintaining a modern IT SOX and controls framework across Nebius’s AI cloud platform, infrastructure, corporate IT, and systems supporting financial reporting.
Responsibilities
- Act as the risk and controls partner for an assigned technology organization or system portfolio, developing understanding of architecture, operations, risks and financial-reporting dependencies.
- Own and continuously improve the IT risk and control framework (scoping, risk assessment, RCM and control catalogue maintenance, documentation and control ownership).
- Lead IT SOX readiness for assigned systems (walkthroughs, evidence quality review, testing coordination, issue evaluation, remediation oversight).
- Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls.
- Design, assess and enhance ITGCs (user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management, third-party services).
- Assess IT application controls, automated controls and IT-dependent business controls; ensure completeness and accuracy of system-generated information.
- Evaluate how business controls depend on systems, configurations, reports and ITGCs; resolve gaps with business and IT control owners.
- Apply risk and controls thinking to cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging.
- Lead assessment and remediation of control gaps from new systems, major tech transformations, platform changes, integrations and acquisitions.
- Review third-party assurance reports; determine impact of vendor controls on Nebius control environment.
- Maintain relationships with external auditors; align on scope, evidence expectations, testing approaches, reliance opportunities, timelines and issue resolution.
- Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners.
- Use data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage and evidence quality.
- Contribute to IT controls methodology, standards, tooling, training, reporting and Risk Partner operating model.
- Provide clear updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.
Qualifications
- A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or related discipline, or equivalent professional experience.
- At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or related area.
- Meaningful in-house technology or corporate ownership experience; Big Four or consulting experience valuable when combined with in-house responsibility.
- Experience in first-line technology, engineering, systems or IT operations role, or as embedded in-house risk partner.
- Hands-on experience in engineering-led technology, cloud, SaaS, platform or digital-product environment.
- Strong knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT.
- Experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation.
- Understanding of cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and Kubernetes.
- Ability to connect business-process controls to supporting systems, automated controls, IPEs/IUCs and IT dependencies.
- Strong communication skills with engineers, technical leaders, Finance stakeholders and external auditors.
- Judgment and ability to challenge control owners while delivering practical, scalable solutions.
- Autonomous, hands-on approach in evolving environments with incomplete processes and competing priorities.
- Strong written and verbal English; ability to operate across international time zones and travel as needed.
Skills
Required:IT risk managementIT controls design and testingSOX / COSO / COBITCloud / DevOps / CI-CDRisk partnership with engineering
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
Last updated Oct 7, 2026. Interested? Apply on the company site.
About Nebius
The ultimate cloud for AI explorers
Discover the most efficient way to build, tune and run your AI models and applications on top-notch NVIDIA® GPUs.
AI CloudToken FactoryGPUKubernetesSlurmManaged servicesTerraformAPI
More open roles at Nebius
- Staff Machine Learning Engineer, LLM Inference Optimization4d agoHybrid (Remote/Hybrid across listed locations) · ML
- Staff Site Reliability engineer - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Engineering manager - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Staff Software engineer - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Transportation Logistics Specialist4d agoHybrid (Europe) · Infrastructure