SOX IT Control Lead
Role details
Job location
Tech stack
Job description
Nebius is looking for a detail-oriented and motivated SOX IT Control Lead to join our CISO PMO team in Amsterdam. You will be central to the execution of our Quarterly Access Review (QAR) process - a critical control under our SOX IT compliance program. You will work closely with system owners, IT teams, and the PMO to ensure access rights are reviewed, documented, and remediated on schedule.
Your responsibilities will include:
Quarterly Access Reviews (QAR)
- Own and coordinate end-to-end execution of Quarterly Access Reviews across in-scope systems
- Track review status, follow up with system owners, and escalate blockers to the PM
- Maintain accurate QAR tracking data in Excel, ensuring completeness and audit-readiness
- Document evidence and remediation actions in Jira in line with control requirements
- Prepare QAR status reports and summaries for the PMO and CISO stakeholders
Control & Compliance Support
- Assist in maintaining the SOX IT controls inventory and associated documentation
- Support internal and external audit activities by preparing evidence packages
- Identify gaps or anomalies during reviews and flag them for assessment
- Collaborate with IT and HR teams to ensure timely user access provisioning and deprovisioning
Process & Operational
- Log, track, and close action items in Jira across QAR cycles
- Maintain structured Excel trackers for review completion, findings, and remediation
- Support continuous improvement of QAR processes and templates
Requirements
- Proficiency in Microsoft Excel - including pivot tables, filters, and structured data management
- Hands-on experience with Jira - task management, workflows, and issue tracking
- Strong attention to detail with a structured, process-oriented working style
- Ability to coordinate multiple stakeholders and meet recurring deadlines
- Clear written and verbal communication skills in English
It will be an added bonus if you have:
- Familiarity with SOX IT compliance and IT general controls (ITGCs) from a compliance perspective
- Exposure to access management or identity governance concepts
- Experience working in an audit, GRC, or IT compliance environment
- Knowledge of common enterprise systems (e.g., ERP, IAM, ITSM platforms), Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
Benefits & conditions
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI