Security Compliance Coordinator
About the Role
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
The Security Compliance Coordinator supports the day-to-day execution and scaling of the company's security compliance program. This hands-on role coordinates audits and certifications, performs control and evidence reviews, supports supplier compliance reviews within Third Party Risk Management (TPRM), and drives assigned actions to closure across multiple stakeholders. The coordinator works alongside other team members and is expected to contribute professional judgment, not only administrative tracking.
Your responsibilities will include:
Compliance and Audit Operations
- Coordinate external audits, certifications, and readiness activities, including SOC 2 and ISO-based programs, evidence collection, control populations, sampling, and auditor requests.
- Perform recurring control testing and evidence reviews; identify gaps and inconsistencies and track findings, corrective actions, and remediation commitments through closure.
- Maintain organized, audit-ready records and provide clear status reporting on milestones, risks, dependencies, and overdue actions.
TPRM and Supplier Compliance Reviews
- Conduct compliance reviews of new and existing suppliers as part of the TPRM process, assessing questionnaires, SOC reports, ISO certifications, policies, and other security and compliance evidence against applicable requirements.
- Identify missing, expired, or insufficient supplier evidence and material compliance gaps; coordinate clarifications and remediation and document the resulting assessment, decision, escalation, or accepted exception.
Governance and Compliance Projects
- Support the policy and procedure lifecycle, including inventory maintenance, owner coordination, scheduled reviews, approval tracking, publication, and reporting.
- Support the implementation and operation of the GRC platform, including workflows, evidence automation, integrations, data quality, reporting, and user adoption.
-
<li data-leveltext="●" data-font="" data-listid="1" data-list-defn-props="{"335552541":1,