IT Risks & Control Manager

Job not on LinkedIn

🕒 August 5

🇺🇸 United States – Remote

💵 $120k - $180k / year

⏰ Full Time

🟠 Senior

🔴 Lead

🎲 Risk

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nebius Group

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

Artificial Intelligence • Enterprise • SaaS

Nebius Group is building one of the world’s leading AI infrastructure companies, focusing on providing the necessary compute, storage, and tools for developers in the AI space. Based in Europe and listed on Nasdaq, Nebius has a global presence with R&D centers across Europe, North America, and Israel. The company's primary offering is an AI-centric cloud platform designed for intensive AI workloads, complemented by various other businesses involved in generative AI development, edtech, and autonomous technology.

📋 Description

• Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies • Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership • Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight • Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls • Design, assess and enhance ITGCs across user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services • Assess IT application controls, automated controls and IT-dependent business controls • Evaluate system dependencies and work with business and IT control owners to resolve gaps • Apply risk and controls thinking to cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging • Lead assessment and remediation of control gaps from new systems, technology transformations, platform changes, integrations and acquisitions • Review third-party assurance reports and determine impacts on the Nebius control environment • Maintain relationships with external auditors and advisers, aligning on scope, evidence, testing, timelines and issue resolution • Translate technical risks and auditor requirements into practical guidance • Use data analytics, automation, continuous monitoring and AI-assisted tools to improve the IT SOX program • Contribute to IT controls methodology, standards, tooling, training, reporting and the Risk Partner operating model • Provide updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders

🎯 Requirements

• A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience • At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area • Meaningful in-house technology or corporate ownership experience is required • Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization • Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment • Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT • Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation • Practical understanding of cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and Kubernetes • Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies • Ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors • Strong judgment and confidence to challenge control owners while developing practical, scalable solutions • Highly autonomous and hands-on approach in an evolving environment with incomplete processes and competing priorities • Strong written and verbal English • Ability to work effectively across international time zones and travel when needed • Professional certification such as CISA, CRISC, CISM, CIA, CPA or equivalent qualification is an added bonus, not required • Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms is an added bonus • Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems is an added bonus

🏖️ Benefits

• Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams