<div class="content-intro"><p><strong>About Nebius:</strong></p> <p>Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.</p> <p>Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.</p> <p>Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.</p></div><h3><strong><span data-ccp-props="{}">The role</span></strong></h3> <p><span data-contrast="auto"><span data-ccp-parastyle="heading 1">Nebius</span><span data-ccp-parastyle="heading 1"> is looking for a Security Risk </span><span data-ccp-parastyle="heading 1">Lead</span><span data-ccp-parastyle="heading 1"> to strengthen security risk management across our global AI cloud infrastructure, products, business operations, and strategic programs.</span></span><span data-ccp-props="{"335559738":280,"335559739":140}"> </span></p> <p><span data-contrast="auto"><span data-ccp-parastyle="heading 1">This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are </span><span data-ccp-parastyle="heading 1">identified</span><span data-ccp-parastyle="heading 1"> early, assessed consistently, and driven toward clear treatment decisions.</span></span><span data-ccp-props="{"335559738":280,"335559739":140}"> </span></p> <p><span data-contrast="auto"><span data-ccp-parastyle="heading 1">The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority.</span></span><span data-ccp-props="{"335559738":280,"335559739":140}"> </span></p> <p><span style="text-decoration: underline;"><strong><span data-contrast="auto"><span data-ccp-charstyle="Strong">Your responsibilities will include</span></span></strong></span></p> <p><strong><span data-contrast="auto">Risk Assessment</span></strong><span data-ccp-props="{"335559739":60}"> </span></p> <ul> <li data-leveltext="●" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes.</span><span data-ccp-props="{"335559739":60}"> </span></li> </ul> <ul> <li data-leveltext="●" data-font="Aptos" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team.</span><span data-ccp-props="{"335559739":60}"> </span></li> </ul> <ul> <li data-leveltext="●" data-font="Aptos" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Evaluate the design and effectiveness of controls and identify residual risk following mitigation.</span><span data-ccp-props="{"335559739":60}"> </span></li> </ul> <ul> <li data-leveltext="●" data-font="Aptos" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">Identify emerging and systemic risks that may affect multiple services, regions, or business functions. </span><span data-ccp-props="{"335559739":60}"> </span></li> </ul> <p><strong><span data-contrast="auto">Risk Register & Tracking</span></strong><span data-ccp-props="{"335559739":60}"> </span></p> <ul> <li data-leveltext="●" data-font="Aptos" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance.</span><span data-ccp-props="{"335559739":60}"> </span></li> </ul> <ul>