Nebius
IT Risks & Control Manager
London, United Kingdom +6 · Remote · Manager · Full-time · Posted Jul 30, 2026
- Location
- London, United Kingdom
Prague, Czech Republic
Germany
Netherlands
Remote - United States
Spain
United Kingdom - Experience
- At least eight years.
- Education
- Degree in Information Systems, Computer Science, Engineering, Accounting, Finance, or a related discipline, or equivalent professional experience.
- Visa sponsorship
- Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility as a condition of hire.
About the job
Serves as an embedded risk partner to technology teams, strengthening IT SOX controls and audit readiness across Nebius’s AI cloud platform and supporting systems.
What you'll do
- Own and improve IT risk and control frameworks, including system scoping, risk assessments, control documentation, and ownership.
- Lead IT SOX readiness, evidence review, testing coordination, issue evaluation, and remediation with technology teams and auditors.
- Design and assess IT general, application, automated, and business-dependent controls across cloud, engineering, and corporate systems.
What they ask for
- At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit, or a closely related area.
- Meaningful in-house technology or corporate ownership experience, including first-line technology work or embedded in-house risk partnership.
- Hands-on experience in an engineering-led technology, cloud, SaaS, platform, or digital-product environment.
- Practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO, and COBIT.
Nice to have
- Professional certification such as CISA, CRISC, CISM, CIA, CPA, or equivalent qualification.
- Experience with AI infrastructure or control automation, continuous monitoring, data analytics, or AI-assisted assurance.
Tools
cloud infrastructure, IAM, DevOps, CI/CD, SDLC, Kubernetes, Workiva, Jira
AI focus
Use data analytics, automation, continuous monitoring, and AI-assisted tools to improve IT SOX control coverage, evidence quality, and program efficiency; AI governance or AI/ML controls are a bonus.
Model-written summary · the original posting is authoritative