IT Risk & Controls Manager
Core
Embedded risk partner scaling IT SOX and controls framework for Nebius's custom-built AI cloud platform, infrastructure, and corporate technology environment.
Role type
Senior IC IT Risk & Controls Manager
Builds
Scalable IT risk and control frameworks, SOX readiness, and control methodologies for engineering-led technology organizations.
Domain
Cloud infrastructure, AI/ML platforms, DevOps, and financial reporting compliance.
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT SOX compliance, ITGC design, IT application controls, COSO framework, COBIT framework, risk assessment, control remediation, audit coordination, cloud infrastructure knowledge, DevOps/CI/CD understanding, Kubernetes familiarity, data analytics for controls, stakeholder management, technical control design.
Preferred skills
CISA, CRISC, CISM, CIA, CPA certifications, building IT SOX frameworks in listed/pre-IPO tech companies, AI infrastructure experience, GRC tooling (Workiva, Jira, ServiceNow), enterprise SaaS/financial systems experience.
Technologies
Kubernetes, CI/CD pipelines, cloud infrastructure, DevOps tools, audit management platforms (Workiva, Jira, ServiceNow), NetSuite, HR platforms, billing systems.
Responsibilities
Act as risk partner for assigned technology portfolios, own IT risk/control framework maintenance, lead IT SOX readiness and testing, partner with engineering/security teams on control design, assess ITGCs and application controls, evaluate business control dependencies, apply risk thinking to modern engineering practices, remediate control gaps from transformations, review third-party assurance reports, align with external auditors, translate technical risks to business guidance, use data analytics for control efficiency, develop control methodologies and reporting.
Seniority
Senior, hands-on IC