IT Risks & Control Manager

Vaga não está no LinkedIn

🕒 Agosto 5

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $120.000 - $180.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

🎲 Riscos

👻 Score fantasma 23%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Nebius Group

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

🤖 Inteligência Artificial

🏢 Corporativo

☁️ SaaS

Artificial Intelligence • Enterprise • SaaS

O Nebius Group está construindo uma das principais empresas de infraestrutura de IA do mundo, focando em fornecer os recursos de computação, armazenamento e ferramentas necessários para desenvolvedores no espaço de IA. Com sede na Europa e listado na Nasdaq, o Nebius tem uma presença global com centros de P&D em toda a Europa, América do Norte e Israel. A principal oferta da empresa é uma plataforma de nuvem centrada em IA projetada para cargas de trabalho intensivas de IA, complementada por vários outros negócios envolvidos em desenvolvimento de IA generativa, edtech e tecnologia autônoma.

Descrição

• Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies • Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership • Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight • Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls • Design, assess and enhance ITGCs across user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services • Assess IT application controls, automated controls and IT-dependent business controls • Evaluate system dependencies and work with business and IT control owners to resolve gaps • Apply risk and controls thinking to cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging • Lead assessment and remediation of control gaps from new systems, technology transformations, platform changes, integrations and acquisitions • Review third-party assurance reports and determine impacts on the Nebius control environment • Maintain relationships with external auditors and advisers, aligning on scope, evidence, testing, timelines and issue resolution • Translate technical risks and auditor requirements into practical guidance • Use data analytics, automation, continuous monitoring and AI-assisted tools to improve the IT SOX program • Contribute to IT controls methodology, standards, tooling, training, reporting and the Risk Partner operating model • Provide updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders

🎯 Requisitos

• A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience • At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area • Meaningful in-house technology or corporate ownership experience is required • Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization • Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment • Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT • Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation • Practical understanding of cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and Kubernetes • Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies • Ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors • Strong judgment and confidence to challenge control owners while developing practical, scalable solutions • Highly autonomous and hands-on approach in an evolving environment with incomplete processes and competing priorities • Strong written and verbal English • Ability to work effectively across international time zones and travel when needed • Professional certification such as CISA, CRISC, CISM, CIA, CPA or equivalent qualification is an added bonus, not required • Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms is an added bonus • Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems is an added bonus

🏖️ Benefícios

• Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams