IT Risks & Control Manager

TL;DR

IT Risks & Control Manager (AI Cloud): Developing and scaling a modern IT SOX and controls framework for a global AI cloud platform with an accent on ITGC design, risk assessment, and audit readiness. Focus on embedding compliance into engineering practices, collaborating with technical leaders, and automating control monitoring within a high-growth, cloud-native environment.

Location: Berlin, Germany

Company

Nebius is a Nasdaq-listed, full-stack AI cloud platform provider building infrastructure for the global AI economy, headquartered in Amsterdam with a global R&D footprint.

What you will do

• Act as an embedded risk partner for technology organizations, developing deep understanding of system architecture and financial dependencies.
• Own and improve the IT risk and control framework, including risk assessments, RCM maintenance, and control documentation.
• Lead IT SOX readiness, including walkthroughs, evidence review, and remediation oversight.
• Design and implement scalable controls for cloud infrastructure, CI/CD, IAM, and containerized environments.
• Collaborate with engineering, security, and finance teams to resolve control gaps and enhance operational efficiency.
• Maintain effective relationships with external auditors and translate technical risks into practical guidance for system owners.

Requirements

• Must be authorized to work in Germany.
• Degree in Information Systems, Computer Science, Engineering, Accounting, or Finance.
• At least 8 years of progressive experience in IT risk, IT controls, IT SOX, or IT audit.
• Meaningful in-house technology or corporate ownership experience is required.
• Strong practical knowledge of SOX 404, ITGCs, COSO, and COBIT.
• Hands-on experience with modern technology environments including cloud infrastructure, DevOps, and Kubernetes.
• Strong written and verbal English proficiency.

Nice to have

• Professional certifications such as CISA, CRISC, CISM, CIA, or CPA.
• Experience building IT SOX frameworks in listed or pre-IPO technology companies.
• Experience with GRC tools like Workiva, Jira, or ServiceNow GRC.
• Exposure to AI governance or controls supporting AI-enabled development.

Culture & Benefits

• Competitive compensation package.
• Opportunities for career growth and professional learning.
• Collaborative, innovative, and international work environment.
• Impactful work on cutting-edge AI infrastructure projects.
• Culture of trust, ownership, and bold thinking.