Security GRC Manager

The role

We’re looking for an experienced Security GRC professional.

This position is integral to our Governance, Risk, and Compliance (GRC) team and involves close work with IT and business leaders, as well as our Internal Audit & Internal Control team.

You’re welcome to work in our office in Amsterdam, hybrid or remotely.

Your responsibilities will include:

• Collaborate with technology, infrastructure, business and other teams to design, implement, document, and enhance security processes and controls.
• Deliver tangible results by streamlining security processes and managing cross-team efforts.
• Lead preparations of Nebius products for security certifications, attestations and security-related laws and regulations.
• Drive security risk management across the organization.
• Maintain compliance with applicable laws, regulations, international and local standards, and internal policies
• Contribute to the research of market insights and customer needs and translating this into changes related to security compliance and trust

We expect you to have:

• 5+ years in cybersecurity: security architecture, processes, GRC
• Deep understanding and ability to manage compliance with multiple frameworks: ISO, SOC, PCI DSS, CSA STAR, HIPAA, etc.
• Master’s degree in Computer Science, Information Security or similar, certifications such as CISSP are a strong plus.
• Hands-on experience with building security processes from scratch or managing major changes.
• Solid and wide knowledge of modern information technologies, experience with cloud is highly desirable.
• Strong stakeholder engagement skills, ability to see perspective and speak the language of developers, lawyers, auditors and business.
• Ability to work independently in a dynamic environment with a hands-on approach.
• Ability to understand complex issues with the context, identify key safeguards and set priorities.
• Proficiency in English and Dutch.