About the Role
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is looking for a Security Risk Lead to strengthen security risk management across our global AI cloud infrastructure, products, business operations, and strategic programs.
This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are identified early, assessed consistently, and driven toward clear treatment decisions.
The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority.
Your responsibilities will include
Risk Assessment
- Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes.
- Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team.
- Evaluate the design and effectiveness of controls and identify residual risk following mitigation.
- Identify emerging and systemic risks that may affect multiple services, regions, or business functions.
Risk Register & Tracking
- Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance.
- Support the ongoing refinement of Nebius's risk assessment and risk register processes, contributing improvements as the practice matures.
- Coordinate with other GRC functions on findings and gap assessments that carry risk implications, and independently determine whether a given finding warrants a risk register entry.
Metrics & Reporting
-
<li data-leveltext="●" data-font="Aptos" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242&q