Nebius
IT Risk & Controls Manager
Amsterdam, Netherlands +6 · Remote · Manager · Full-time · Posted Jul 30, 2026
- Location
- Amsterdam, Netherlands
Prague, Czech Republic
Germany
Netherlands
Remote - United States
Spain
United Kingdom - Experience
- At least eight years; Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background is insufficient.
- Education
- Degree in Information Systems, Computer Science, Engineering, Accounting, Finance, or a related discipline, or equivalent professional experience.
- Visa sponsorship
- Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility as a condition of hire.
About the job
Partners with engineering and technology teams to strengthen Nebius’s IT SOX and controls framework across its AI cloud platform, infrastructure, corporate technology, and systems supporting financial reporting.
What you'll do
- Own IT risk and control frameworks, system scoping, risk assessments, control documentation, and IT SOX readiness, testing, and remediation.
- Design and assess IT general, application, automated, and IT-dependent controls across cloud, engineering, corporate IT, and third-party systems.
- Coordinate with engineers, Finance, control owners, and external auditors; improve evidence quality and use analytics, automation, and AI-assisted tools to enhance the IT SOX program.
What they ask for
- At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit, or a closely related area.
- Meaningful in-house technology or corporate ownership experience, including work in a first-line technology/IT role or as an embedded in-house risk partner.
- Practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO, and COBIT.
- Hands-on experience in an engineering-led technology, cloud, SaaS, platform, or digital-product environment; strong written and verbal English.
Nice to have
- Certifications such as CISA, CRISC, CISM, CIA, CPA, or equivalent; experience transforming an IT SOX framework in a listed or pre-IPO technology company.
- Experience with GRC tools, control automation, continuous monitoring, data analytics, AI-assisted assurance, or AI governance.
Tools
cloud infrastructure, IAM, DevOps, CI/CD, SDLC, Kubernetes, Workiva, Jira
AI focus
Use data analytics, automation, continuous monitoring, and AI-assisted tools to improve IT SOX control coverage, evidence quality, and program efficiency; AI governance and AI/ML controls are preferred experience.
Model-written summary · the original posting is authoritative