Компания БФТ — российский вендор, разработчик программных продуктов и заказных решений, входит в группу компаний «Ростелеком». За 28 лет на ИТ-рынке компания имеет более 3300 сотрудников в 21 городе и реализовала более 7100 проектов по всей стране. Среди заказчиков масштабных федеральных проектов — Социальный фонд России, Росреестр, Роструд, Минцифры и другие. Решениями компании пользуются более 100 млн человек по всей стране.
В настоящий момент открыта вакансия Java разработчика на проект ГИС «Единая централизованная цифровая платформа в социальной сфере» (ЕЦП) — крупнейший федеральный проект автоматизации и реинжиниринга социальной сферы, охватывающий более 50 млн граждан страны. Проект имеет микро-сервисную архитектуру, событийную модель работы с данными, хранит и обрабатывает в режиме реального времени 5,5 ПБ данных, и обрабатывает более 5000 обращений к системе в секунду.
Задачи:
— Разработка и поддержка сервисов в микросервисной архитектуре
— Интеграция с внешними и внутренними системами
— Контроль сроков выполнения задач и качества кода
— Сопровождение внедрения программ и программных средств
— Участие в оптимизации и улучшении кода и используемых технологий
— Взаимодействие со смежными командами разработки и архитекторами
— Анализ технических рисков и сбоев в работе систем и их устранение
Требования:
— Опыт коммерческой разработки от 3 лет
— Хорошее знание Java 11+
— Опыт разработки с использованием Spring 4+
— Знание основ многопоточности и Java Memory Model (JMM)
— Практический опыт работы с Maven
— Владение системой контроля версий Git
— Опыт работы с SQL/NoSQL базами данных (PostgreSQL / Cassandra)
— Практический опыт работы с очередями сообщений (Kafka, RabbitMQ)
— Знание основ CI/CD (GitLab CI) для автоматизации процессов сборки и деплоя
Условия:
— Работа в аккредитованной ИТ-компании с официальным трудоустройством по ТК РФ
— Корпоративная техника для комфортной работы
— ДМС после испытательного срока с возможностью страхования детей и родственников
— Участие в корпоративных мероприятиях и праздниках
— Реферальная программа с вознаграждением за рекомендации друзей
— Оплата посещения профильных конференций и курсов, поддержка в обучении
ГибридmiddleМосква; В настоящий момент находимся в поиске Java разработчика на проект ГИС «Единая централизованная цифровая платформа в социальной сфере» ЕЦП - единая цифровая платформа - крупнейший федеральный проект автоматизации и реинжиниринга социальной сферы: - более 100 тыс
Задачи:
— Проектировать, разрабатывать, оптимизировать и поддерживать ETL процессы для загрузки данных из различных источников
— Управлять потоковой обработкой данных с использованием Apache Kafka
— Разрабатывать и оптимизировать структуры данных, схемы и запросы в PostgreSQL для операционных и транзакционных задач
— Строить, администрировать и настраивать ClickHouse кластеры для обеспечения высокой производительности аналитических запросов на больших объемах данных
— Разрабатывать и поддерживать решения на базе ClickHouse (или связки PostgreSQL + ClickHouse)
— Интегрировать данные между PostgreSQL, Kafka, ClickHouse и другими компонентами инфраструктуры (API, очереди, S3)
— Осуществлять мониторинг производительности, отказоустойчивости и безопасности data pipeline и баз данных
— Автоматизировать процессы обработки данных и развертывания (CI/CD)
— Взаимодействовать с аналитиками, разработчиками и product owner'ами для понимания потребностей в данных и их реализации
— Устранять неисправности в pipeline данных и базах данных
Требования:
— Опыт работы с одним из языков программирования от 2-3-х лет: Python (предпочтительно), Golang (будет плюсом)
— Опыт разработки и администрирования ClickHouse (знание особенностей движков таблиц, оптимизация запросов, кластеризация, репликация, шардирование)
— Глубокое понимание и практический опыт работы с Apache Kafka, настройка и обеспечение надежности потоков данных
— Опыт работы с PostgreSQL (написание сложных SQL-запросов, оптимизация производительности, понимание механизмов транзакций, репликации)
— Понимание принципов построения ETL процессов
— Знание SQL на продвинутом уровне
— Понимание принципов DevOps (Docker, Kubernetes, Linux, CI/CD) применительно к инфраструктуре данных
Задачи:
— Участвовать в проработке архитектурных решений для запуска новых продуктов/проектов, взаимодействуя с менеджерами, аналитиками, разработчиками и тестировщиками
— Заливать новые фичи в develop
— Проводить Code Review и помогать коллегам избегать ошибок в продакшене
— Покрывать тестами каждую задачу
— Исправлять баги, если тесты их не выявили
— Обеспечивать интеграцию решений в процесс CI/CD
— Поддерживать высокую отказоустойчивость и производительность продакшена
— Выполнять разнообразные задачи: от мелких правок API до создания новых сервисов
Требования:
— Опыт разработки на Java не менее года, использование Java 17 и выше
— Умение работать в команде, знание гибких методологий Scrum/Kanban
— Знание систем автоматизации сборок Maven/Gradle, опыт работы с Gitlab CI/Jenkins
— Навыки подготовки Docker образов и знакомство с Kubernetes
— Знание паттернов проектирования и System Design
— Базовые знания Linux и уверенное использование Git
ОфисМосква
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Задачи:
— Разработка и развитие кода по принятым общебанковским/командным стандартам.
— Обеспечение качества кода и полноты реализации требований.
— Проработка задач: уточнение требований, анализ рисков, декомпозиция, оценка, согласование ожидаемого результата.
— Самостоятельное ведение задач от согласованного решения и до запуска в промышленной среде.
— Выполнение PoC и R&D работ для проверки подходов в рамках конкретной задачи/сервиса.
— Участие в разборе проблем в промышленной среде совместно с командой сопровождения.
— Поиск и устранение дефектов и проблем производительности (в том числе по результатам нагрузочного тестирования).
— Взаимодействие со смежными командами по интеграциям и техническим вопросам.
— Участие в ведении технической документации по проекту; технические консультации.
Требования:
— Общий стаж коммерческой разработки на Java от 4 лет.
— Уверенные навыки разработки потоковых сервисов (на Kafka / Kafka Streams).
— Опыт работы с объектными хранилищами (MinIO, S3).
— Опыт работы с SQL БД (Oracle, PostgreSQL, YDB).
— Опыт работы с Kubernetes (понимание базовых сущностей, умение диагностировать проблемы развёртывания и конфигурации приложений).
— Опыт работы с инструментами контейнеризации и понимание CI/CD на уровне пользователя.
— Опыт работы с REST/SOAP/gRPC.
— Уверенные навыки работы с Git.
— Опыт разработки высоконагруженных систем.
— Опыт применения принципов проектирования и архитектурных паттернов.
— Поддержание чистого и читаемого кода, обязательное участие в code review, покрытие изменений unit- и интеграционными тестами.
— Будет плюсом: опыт работы с Apache Flink, опыт работы в банковской сфере.
Условия:
— Стабильный и прозрачный доход: размер заработной платы обсуждается по итогам собеседования + квартальная премия по результатам KPI.
— Возможность влиять на крупные проекты, которые важны миллионам пользователей.
— Полную удалёнку или гибрид на выбор, а также уютный ИТ-хаб в Москве, Санкт-Петербурге, Екатеринбурге и сезонный коворкинг в Сочи.
— Сложные и интересные задачи, современный стек технологий.
— Заботу о вашем здоровье: программа ДМС с первых дней работы, куда входит стоматология, обслуживание в лучших клиниках города, страхование и компенсация 10-ти дней больничного.
— Возможность вертикального и горизонтального карьерного роста: регулярно проходят тренинги, вебинары, митапы и демо-дни.
— Оплату посещения профильных конференций и курсов, помощь с подготовкой к публичным выступлениям и написанием статей на Хабр.
— Доступ к бесплатным корпоративным библиотекам Alpina Digital, MyBook и бизнес-изданий.
— Предложения от Банка только для сотрудников: собственные спортзалы (Москва, Санкт-Петербург, Екатеринбург), а также скидки на услуги туристических агентств, продукты питания, в рестораны, бары, магазины.
— Работа у трижды лучшего работодателя РФ по версии hh.ru, Forbes, РБК.
— Программа развития AI-грамотности: треки по работе с нейросетями от базового до продвинутого уровня.
Задачи:
— Разрабатывать микросервисы и пайплайны обработки данных на Python.
— Внедрять ML-модели, разработанные Data Science специалистами, в продукты команды (продуктивизация).
— Создавать отказоустойчивые интеграции с внешними и внутренними провайдерами данных.
— Покрывать код тестами, метриками и создавать технические дэшборды.
— Обеспечивать наблюдаемость сервисов (observability) и следовать единым подходам к созданию сервисов.
— Выстраивать взаимодействие между ML и Dev частями команды для уменьшения TTM.
Требования:
— Коммерческий опыт разработки на Python от 3 лет.
— Опыт в создании веб-сервисов (FastAPI).
— Знание основ ООП, принципов SOLID и шаблонов проектирования; умение писать чистый поддерживаемый код.
— Понимание принципов CI/CD и практический опыт работы с Gitlab CI/CD.
— Опыт работы с K8s для развёртывания приложений.
Location: Amsterdam, Netherlands; Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The Role
We’re looking for a
Software Engineer
to build software that makes network operations safe, scalable, and boring — even as we launch new data centers and expand fast. This is not a “write scripts for configs” role: you’ll build the tooling and services that sit between the network core (switches/ports/VLANs, traffic processors) and the cloud platform on top, using open source where it fits and building the missing pieces where it doesn’t.
Your responsibilities will include:
Build and maintain services and tooling that automate the network lifecycle: day-0 provisioning, day-N changes, drift detection, and operational verification
Make network changes safe and transparent: CI/CD workflows, diff/review tooling, staged rollouts/rollbacks, audit trails, and guardrails
Develop observability systems that scale across many sites: telemetry pipelines, signal quality, and tooling that shortens incident investigations
Close “last mile” gaps between the network and the platform: integrate source-of-truth data, expose APIs, and build reliable automation around it
Collaborate closely with network engineers and SREs to turn real operational pain into product-quality tooling
We expect you to have:
5+ years of professional software engineering experience (or equivalent practical background)
Strong coding skills and ownership mindset: you can ship and operate reliable services
Proficiency in
Go
or readiness to switch;
Python
is also welcome (other languages can be useful for OSS debugging/fixes)
You don’t have to be Network expert
but we expect you to have interest in infrastructure and/or network
It will be an added bonus if you have:
Background in networking (ex-network engineer, CCNP/education, DC networking exposure) or strong interest and proven ability to learn fast
Experience building automation/infra tooling: CI/CD, IaC, testing/staging environments, or “network-as-code” style workflows
Low-level networking / datapath experience: eBPF/XDP, DPDK, kernel networking, traffic processing systems
Experience designing high-load services and observability platforms (metrics/logs/traces, alerting, regression detection)
Contributions to open source or experience extending/debugging OSS components in production environments
We expect Engineers to:
Manage large-scale projects involving multiple stakeholders
Break down complex tasks and guide both their own work and that of more junior colleagues
Be experts in specific technologies and write high-quality code that can serve as a reference
Assess task priority and focus on high-impact work, avoiding low-value efforts
Have strong architectural thinking and contribute to system design
Be involved in hiring and actively contribute to interviews
Be willing to share knowledge and mentor others
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Задачи:
— развитие и поддержка современной DevOps-инфраструктуры.
Требования:
— опыт работы от 3 лет;
— опыт с Docker и Kubernetes;
— опыт с CI/CD (GitHub Actions или аналогичные инструменты);
— опыт с Terraform и/или Ansible;
— опыт с Prometheus, Grafana, ELK Stack;
— опыт работы с облачной инфраструктурой.
Location: Remote, Singapore
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Customer Success Architect, you'll serve as a trusted strategic advisor and technical authority to some of GitLab's most complex and high-value Enterprise and Government customers across Singapore. In this role, you will be driving and shaping how our largest customers adopt GitLab's intelligent DevSecOps platform to achieve their business goals and realise meaningful, long-term outcomes. You will be working closely with customers after the sale to turn pre-sales command plans into clear success plans, guide them through their customer journey, and drive adoption, utilization, and technical maturity. You will also be directly influencing renewal and expansion decisions through your post-sales engagements with executive-level decision makers in the account.
This is a senior individual-contributor role for someone who has already led high-stakes pre or post sales customer engagements in large complex accounts across multiple industry domains to drive quantifiable business outcomes..The individual is comfortable operating with ambiguity, and can credibly advise VP- and C-level stakeholders on business transformation, application modernization, platform strategy, architecture, and organizational DevSecOps transformation. You'll also be shaping playbooks and best practices, and acting as an escalation point for the team's most technically or politically complex situations.
Reporting into the APJ Customer Success organization, you'll own a portfolio of GitLab's most strategic enterprise and Government accounts, act as the executive-level technical liaison for these accounts, and drive cross-functional resolution of their highest-priority issues — coordinating and, where needed, directing the efforts of Product Management, Engineering, Sales, Professional Services, and Support. You'll bring deep technical expertise in CI/CD, cloud platforms, multi-cloud, hybrid architecture and enterprise DevSecOps practices.You will use that expertise to shape customers' long-term platform strategy, apply best practices, configure GitLab for their environments and stay current with platform capabilities. In your first year, success will look like establishing yourself as the trusted senior advisor across a portfolio of flagship accounts, building strong relationships with key stakeholders, materially improving and increasing platform maturity, leading retention and renewal conversations, increasing customer satisfaction across your portfolio and contributing to the broader CSA team's technical standards and ways of working.
Some examples of our projects:
Turning pre-sales command plans into measurable customer success plans that align technical adoption with business outcomes
Leading and driving the technical strategy behind a large-scale DevSecOps platform consolidation for a regulated Enterprise account or Government, including guiding enterprise customers on GitLab best practices across CI/CD, DevSecOps, cloud architecture, TCO, applying compliance and architecture as well as business case presentations to customer executives
Owning end-to-end resolution of a critical, multi-team escalation for a flagship account — driving root cause analysis, coordinating Engineering/Product/Support, and personally briefing customer executives on remediation
What you’ll do
Owns a book of Enterprise and Government customers and drive adoption, retention, expansion, and overall satisfaction through ongoing strategic, business and technical engagement.
Serves as the senior post-sales strategic, business and technical advisor for a portfolio of GitLab's most complex, highest-value enterprise and Government accounts, shaping multi-year platform and DevSecOps strategy in partnership with customer executives, coordinating responses to questions, issues, and escalations across Support, Product Management, Sales, and Professional Services.
Translates ambiguous, high-stakes business outcomes into rigorous Customer Success Plans that are regularly reviewed with customer stakeholders. The Customer Success Plans contain clearly defined business outcome related goals, quantifiable benefits, realistic adoption milestones and remediation actions.
Prepares executive-ready reporting conducted on a regular basis with clear accountability for outcomes that demonstrate impact on adoption, retention, and expansion of GitLab products and services.
Provides deep technical guidance on enterprise-scale CI/CD architecture, DevSecOps maturity models, platform consolidation strategy, including advising on complex trade-offs (e.g., multi-cloud vs. hybrid, self-managed vs. GitLab Dedicated, etc).
Owns the full lifecycle of your account portfolio's adoption, retention, and expansion outcomes, with direct accountability for the commercial and technical health of flagship relationships.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the root cause analysis and personally managing executive communication and risk.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the driving root cause analysis and personally managing executive communication and risk.
Designs and delivers technical enablement programs at scale, identifying systemic maturity gaps across a portfolio and building the roadmap (not just individual sessions) that closes them.
Advises key customers stakeholders on cloud and platform architecture decisions with enterprise-wide impact, which includes multi-region deployment strategy, secrets management architecture and network/security topology for regulated environments.
Guides customers on GitLab platform best practices including Git workflows, branching strategies, CI/CD pipeline design, DevSecOps adoption patterns, and security scanning configuration.
Provides hands-on technical enablement and onboarding, including education on GitLab features, releases, and use cases, and identification of training and maturity opportunities aligned to customer goals.
Engages customers on cloud platform architecture decisions relevant to their GitLab deployment — including self-managed vs. GitLab Dedicated, Runner configuration and auto-scaling, secrets management, and network topology considerations.
Advises customers on DevSecOps consolidation value — articulating the TCO, compliance, and developer experience case for platform consolidation over fragmented toolchains.
Collaborates with Professional Services, Sales, and internal teams to identify expansion opportunities, recommend enablement interventions, and ensure a seamless customer journey from onboarding through renewal.
What you’ll bring
Must be a Singapore Citizen and based in Singapore
Mandatory English language proficiency
Hands-on experience building or owning CI/CD pipelines end to end, including pipeline as code, multi-stage design, artifact management, and troubleshooting in real-world environments.
A career built across different direct customer facing engagement roles such as Technical Account Management, Technical Solution Sales, Pre-sales, Business Development, Consulting, Professional services across customers in different industry vertical domains like Government, Banking, Financial and Insurance Services, Manufacturing, Telecommunications, engagement with multiple technology and platform transition experience such as from on-premise deployments to Cloud, application modernization experience from monolith to microservices, from Waterfall to DevOps to DevSecOps and others to provide the depth and breadth of experience to advise customers on transformations and deployments that you've already seen play out elsewhere across your multiple customer engagements, more than once.
A long-standing demonstrated track record as the person other senior people call when an account is in genuine crisis or gained across a sustained career of Enterprise or Government account ownership
Credible judgment earned by personally owning the outcomes of dozens of complex enterprise customer account engagements over the course of a career, including situations with real commercial, technical, and reputational stakes
A consistent track record of being trusted by customer executives and internal leadership to operate with minimal oversight in ambiguous and high-pressure situations
Deep,hands-on expertise in DevSecOps practices, including shift-left security and integrating SAST, DAST, SCA, and container scanning into development workflows as well as architecting and troubleshooting CI/CD pipelines at enterprise scale
Expert-level understanding of Git, merge request workflows and delivery lifecycles, having personally guided organizations through branching strategies such as trunk-based development and GitFlow, and modern software delivery lifecycles.
Demonstrated experience with infrastructure as code, GitOps, Cloud and on-premises environments with relevant experience that support GitLab deployments, including networking, identity and access management (IAM), secrets management, and deployment considerations for regulated or high-security environments
Demonstrated experience partnering with customers to turn business requirements into actionable success plans, with measurable goals and verifiable business outcomes that are suitable for executive-level quarterly reporting.
Demonstrated ability to drive product adoption, dive deep into the accounts assigned and scale out the level of influence in the account.
Demonstrated ability to build and defend executive-level business cases (TCO, compliance, risk) that influence budget and platform strategy decisions
Demonstrated ability to operate with autonomy in ambiguous, high-stakes situations with strong communication, stakeholder management, and organizational experience to manage a portfolio of enterprise and Government customers, balance multiple priorities, guide escalations, and coordinate effectively across customer teams and internal cross functional teams to resolve issues appropriately and in a timely manner.
About the team
The Customer Success Architect team is part of GitLab's Customer Experience organization. It supports strategic enterprise and Government accounts across the APJ region through hands-on technical guidance, consultative partnership, and practical problem solving.
We act as a reliable technical advisor and an important link between customers and the broader GitLab ecosystem. We bring platform, cloud, and DevSecOps depth to customer engagements and work closely with Product Management, Engineering, Sales, Support, and Professional Services to address questions, guide customers through technical choices, navigate escalations, and help them realize measurable value from GitLab.
Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region. It's a team well suited for people who enjoy solving complex customer challenges, building long-term partnerships, and helping enterprise organizations grow their maturity with GitLab in practical, measurable ways.
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Задачи:
- Разработка и развитие кода по принятым общебанковским/командным стандартам.
- Обеспечение качества кода и полноты реализации требований.
- Проработка задач: уточнение требований, анализ рисков, декомпозиция, оценка, согласование ожидаемого результата.
- Самостоятельное ведение задач от согласованного решения и до запуска в промышленной среде.
- Выполнение PoC и R&D работ для проверки подходов в рамках конкретной задачи/сервиса.
- Участие в разборе проблем в промышленной среде совместно с командой сопровождения.
- Поиск и устранение дефектов и проблем производительности (в том числе по результатам нагрузочного тестирования).
- Взаимодействие со смежными командами по интеграциям и техническим вопросам.
- Участие в ведении технической документации по проекту; технические консультации.
Требования:
- Общий стаж коммерческой разработки на Java от 4 лет.
- Уверенные навыки разработки потоковых сервисов (на Kafka / Kafka Streams).
- Опыт работы с объектными хранилищами (MinIO, S3).
- Опыт работы с SQL БД (Oracle, PostgreSQL, YDB).
- Опыт работы с Kubernetes (понимание базовых сущностей, умение диагностировать проблемы развёртывания и конфигурации приложений).
- Опыт работы с инструментами контейнеризации и понимание CI/CD на уровне пользователя.
- Опыт работы с REST/SOAP/gRPC.
- Уверенные навыки работы с Git.
- Опыт разработки высоконагруженных систем.
- Опыт применения принципов проектирования и архитектурных паттернов.
- Поддержание чистого и читаемого кода, обязательное участие в code review, покрытие изменений unit- и интеграционными тестами.
- Будет плюсом: опыт работы с Apache Flink, опыт работы в банковской сфере.
УдалённоseniorГеография найма не уточнена, офис: Москва
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level and live longer through a deeper understanding of their bodies and daily lives. Protecting our members’ data and ensuring our systems scale securely and reliably is core to this mission.
As a Director of Product Security you will play a critical role in shaping, driving, and leading our software engineering teams towards a secure software development lifecycle and strengthening product-facing identity and authentication capabilities that protect our members. This role will strategically craft the roadmap in collaboration with stakeholders across the business and staff the team to fulfill growing security needs across engineering.
In addition to core product security responsibilities, you will partner closely with functions across Product, Software, Legal, Compliance, and enterprise security to meaningfully move the security posture of the company. We are seeking a leader and strategic partner with prior experience driving the engineering side of security for software teams.
RESPONSIBILITIES
- Build, lead, and grow multiple engineering teams executing on product-facing security strategy, including member authentication, code security, cloud security across AWS accounts, privacy by design, and threat modeling.
- Lead application vulnerability management programs across bug bounties, code vulnerabilities, container vulnerabilities, and infrastructure vulnerabilities.
- Build, integrate, and mature DevSecOps tooling and developer security controls, including SAST, SCA, container scanning, secrets detection, CI/CD security checks, and secure-by-default developer workflows.
- Define and communicate long-term product security strategy, product architecture standards, and design principles for product-facing systems.
- Partner with engineering, office of the CISO, and compliance leadership to embed privacy and security by design across the software development lifecycle.
- Establish and enforce best practices, standards, and processes for secure software development, testing, and deployment.
- Provide mentorship, guidance, and career development for engineering managers and individual contributors.
- Foster a culture of innovation, teamwork, psychological safety, and continuous learning within the Product Security organization.
QUALIFICATIONS
- Demonstrated success scaling a security team whilst crafting clear and efficient team domains.
- Proven experience as a technical leader managing multiple teams or a growing security engineering organization.
- Experience growing high level individual contributor career growth at the staff level or higher.
- Deep understanding of product security principles, including vulnerability management, data privacy, threat modeling, secure SDLC practices,and secure-by-default engineering patterns.
- Experience building or integrating developer security tooling to improve secure-by-default practices.
- Strong technical background in software development, testing, and deployment processes.
- Excellent communication, interpersonal, and leadership skills with the ability to influence across teams and levels.
BONUS QUALIFICATIONS
- Experience with AWS cloud environments and data-driven decision-making.
- Hands-on experience with containerized microservice environments.
- Background in incident response and post-mortem analysis for security events.
- Familiarity with automation frameworks for vulnerability scanning, compliance checks, or infrastructure security.
ABOUT YOU
- You’re a strategic and people-focused leader who thrives on balancing hands-on technical oversight with long-term organizational growth.
- You have experience building and scaling security engineering focused teams.
- You’re passionate about creating secure, privacy-first systems that protect member data and enable innovation.
- You collaborate effectively across technical and non-technical teams and can operate confidently in both strategic and tactical domains.
- Above all, you believe that security enables innovation, and you lead by fostering a culture that supports both speed and safety.
Learn more about our Software Org and how to be successful in your engineering career at WHOOP via our Career Framework https://engineering.prod.whoop.com/careerframework.
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/ to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Location: Tashkent, Uzbekistan
DMED
разрабатывает и сопровождает крупную государственную цифровую платформу здравоохранения.
Мы ищем
Специалиста отдела мониторинга
, который поможет обеспечивать стабильную работу сервисов, развивать систему мониторинга, выстраивать процессы наблюдаемости (Observability) и оперативно выявлять возникающие проблемы.
Обязанности:
Мониторинг и Observability:
Сопровождение и развитие системы мониторинга на базе
Zabbix
,
Prometheus
и
Grafana
.
Настройка и поддержка дашбордов, метрик, триггеров и алертов.
Оптимизация системы алертинга, снижение количества ложных срабатываний и повышение качества мониторинга.
Формирование требований к метрикам и логированию новых сервисов.
Участие в развитии процессов наблюдаемости (Observability: Metrics, Logs, Traces) и повышении надёжности сервисов.
Контроль и анализ инцидентов:
Контроль доступности, производительности и стабильности информационных систем.
Первичный анализ инцидентов, выявление причин проблем и их передача профильным командам.
Взаимодействие и документация:
Взаимодействие с командами DevOps, разработки и технической поддержки по вопросам мониторинга и логирования.
Контроль актуальности документации, базы знаний и инструкций по мониторингу.
Requirements
Администрирование Linux:
Уверенные знания Linux на уровне администратора.
Понимание принципов работы файловых систем, процессов и сетевого взаимодействия.
Навыки анализа системных логов (journalctl, syslog, logrotate).
Опыт диагностики производительности серверов (CPU, RAM, Disk IO, Network).
Мониторинг и Observability:
Практический опыт работы с
Grafana
,
Zabbix
и
Prometheus
.
Навыки построения дашбордов, настройки алертинга, метрик и триггеров.
Понимание концепций Observability (Metrics, Logs, Traces).
Будет плюсом
Опыт работы с системами централизованного логирования (
ELK / OpenSearch
,
Loki
,
Graylog
).
Опыт работы с
Docker
и
Kubernetes
.
Навыки автоматизации скриптами на
Bash
или
Python
.
Базовые знания CI/CD и понимание принципов работы распределенных ИТ-систем.
Benefits
Официальное трудоустройство;
Работа в развивающейся IT-компании;
Молодой и дружный коллектив;
График работы: пн–пт с 9:00 до 18:00.
Участие в масштабных цифровых и государственных проектах.
Конкурентную заработную плату.
Современный офис с комфортной инфраструктурой.
Простор для карьерного и профессионального роста.
Aviasales для бизнеса — сервис организации командировок и первый в мире мета-поиск авиабилетов для компаний. Сервис сравнивает цены на авиабилеты среди разных поставщиков и предлагает b2c-прайс для бизнеса. Кроме авиабилетов, продаются отели, ЖД-билеты, автобусные билеты, трансферы, страховки и дополнительные услуги. Компании получают дешёвые цены на тревел-услуги, удобный личный кабинет, возможность заказа билетов сотрудниками, настраиваемые тревел-политики и все необходимые закрывающие документы для бухгалтерии.
Бэкенд написан на Python, фронтенд – REST, на 85% обслуживает основную панель для клиентов, на 10% — внутреннюю админку саппорта, на 5% — публичную часть API. Часть кода отвечает за взаимодействие с фронтендом и реализует внутреннюю логику, другая часть — множество взаимодействий с поставщиками и связки с другими сервисами. Задачи планируются недельными спринтами в Jira.
Задачи:
— разрабатывать бекенд на Python;
— вносить изменения в уже существующие компоненты;
— проактивно предлагать улучшения в архитектуре и коде, опережая появление проблем;
— участвовать в планировании развития системы и приоритезации технических задач;
— проектировать архитектуру новых сервисов бекенда Авиасейлс для бизнеса (корпоративные путешествия: авиа, ж/д, отели, автобусы, бизнес-трипы, политики, отчётность).
Требования:
— уверенное владение Python;
— экспертиза в DDD и лучших архитектурных практиках;
— опыт с любым из современных Python-стеков: Django / FastAPI / SQLAlchemy;
— опыт применения паттернов проектирования и SOLID;
— опыт работы с PostgreSQL, MongoDB и построения оптимальных схем данных;
— знание Kubernetes, Docker, CI/CD (Jenkins, GitHub Actions);
— опыт с системами очередей и асинхронными задачами (Kafka);
— опыт проектирования систем с четким разделением на слои ответственности;
— опыт фича оунерства: умение коммуницировать с бизнес-заказчиками и техническими специалистами, умение рассказывать кейсы;
— навыки автоматизированного тестирования (pytest).
Условия:
— работа из любой точки мира;
— оплата в долларах;
— удобные процессы без бюрократии, горизонтальные и открытые коммуникации, быстрое обсуждение идей и принятие решений;
— компенсации: ДМС, психотерапия или иностранные языки, занятия спортом и больничный;
— возможность работать на Пхукете с видом на океан.
Location: Chicago
DRW
is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.
Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.
We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it.
DRW
is a place of high expectations, integrity, innovation and a willingness to challenge consensus.
UP (Unified Platform) consolidates data and technologies into a comprehensive solution, accelerating time to market. Optimizing decision-making and research, our platform simplifies implementing new ideas, enhancing our competitive edge. We work from high-level requirements where programmers are expected to gain an intimate understanding of the business. We strive for an environment where developers have the autonomy to pursue business solutions without arbitrary management constraints. We are a group of polyglots and technologists always seeking to find the right tool for each problem. Broadly, the development teams at DRW believe in rapid deployment and feedback, automated testing, and cohesive, transparent, lightly coupled service architectures.
DRW has openings for
Senior Software Engineers
on its Treasury and Reference Data development teams. These teams build and operate systems the firm depends on for financing, liquidity, and the instrument data that underpins trading and post-trade workflows. The teams are small and collaborative — you’ll work directly with business partners and enjoy building meaningful products from day one.
These openings sit on two related teams:
Treasury — builds systems that support position financing, margin and collateral management, and cash and liquidity management across the firm.
Reference Data — owns the data platform that stores and distributes instrument and related reference data used across research, trading, and post-trade workflows.
We hire through a single interview pipeline and match candidates to the team and problems that fit best as we learn more about each person’s current skills and long-term development goals.
Responsibilities:
Designing, building, and testing systems used across the firm — services, data products, and the UIs that sit on them
Collaborating with business partners to turn ambiguous business problems into clear technical plans and shipped software
Owning software end-to-end after it ships — we run what we build (deploy, operate, on-call)
Working across greenfield systems and existing codebases
Building and improving tooling and processes around CI/CD, containers, and Kubernetes / internal cloud
Mentoring and raising the bar for engineering practice
Learning and championing useful new technologies where they fit
Desirable Experience:
We are looking for strong senior generalists. Experience in the following areas is helpful:
Full-stack development in Java, Python (FastAPI), and/or Ruby (Rails)
Strong relational data modeling fundamentals
GitOps and Kubernetes
Job orchestration systems (Airflow, Prefect, etc.)
Though prior domain experience is not required, relevant background can help place a candidate on a particular team:
Payments and/or treasury systems (Treasury)
Vendor/exchange data processing and/or data taxonomy (Reference Data)
The annual base salary range for this position is $200,000 to $275,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.
For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at
https://drw.com/privacy-notice
.
California residents, please review the California Privacy Notice for information about certain legal rights at
https://drw.com/california-privacy-notice
.
#LI-GV1
Location: London
DRW
is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.
Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.
We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it.
DRW
is a place of high expectations, integrity, innovation and a willingness to challenge consensus.
DRW has an opening for a Senior Software Engineer focused on digital assets. The team builds and operates systems that move and safeguard cryptoassets across the firm — including treasury automation, wallet inventory and reference data, integrations with custody platforms, and operational controls used by digital asset operations. You’ll work directly with those business partners and enjoy building meaningful products from day one.
At DRW we strive for an environment where technologists are free to pursue solutions to the problems of the business free from arbitrary management constraints and supported by excellent technical resources. All development teams at DRW believe in rapid deployment and feedback, automated testing, and cohesive, transparent, lightly-coupled service architectures. We ship on Kubernetes with modern CI/CD. Candidates should have strong initiative and proven experience independently driving projects to completion. We work from high-level requirements and value engineers who dig into the business to build the right thing.
Responsibilities:
- Designing, building, and testing full-stack applications (APIs through UI) used by digital asset operations and related business partners
- Partnering with those teams to turn ambiguous business problems into clear technical plans and shipped software
- Owning software end-to-end after it ships — we run what we build (deploy, operate, on-call); we don’t hand systems off to a separate ops team
- Working across greenfield systems and existing codebases
- Building and improving tooling and processes around CI/CD, containers, and Kubernetes / internal cloud
- Collaborating with other software teams, trading desks, and business units
- Mentoring and raising the bar for engineering practice on a small team
- Learning and championing useful new technologies where they fit
Desirable Experience:
- We are looking for strong senior engineers with crypto or digital-asset systems experience. Deep Python expertise is a meaningful differentiator for this role.
- Cryptoassets, digital-asset operations, or custody / wallet platforms (or closely adjacent high-stakes money-movement systems)
- DeFi, smart contracts, staking, or other on-chain systems
- Full-stack development with Python (FastAPI)
- Strong relational data modeling fundamentals
- GitOps and Kubernetes
- Job orchestration systems (Airflow, Prefect, etc.)
For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at
https://drw.com/privacy-notice
.
California residents, please review the California Privacy Notice for information about certain legal rights at
https://drw.com/california-privacy-notice
.
#LI-MM1
Location: London, United Kingdom
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is seeking a
IT Risk & Controls Manager
to act as an embedded risk partner to our engineering and technology organizations.
You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.
This role goes beyond traditional IT audit testing. You will work directly with engineering leaders, system owners, Finance, Internal Controls and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation and embed compliance into the way our technology organizations operate.
The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders and aligning audit expectations with external assurance providers.
Your responsibilities will include:
Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies.
Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership.
Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight.
Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls that address risk while supporting operational efficiency.
Design, assess and enhance ITGCs across areas such as user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services.
Assess IT application controls, automated controls and IT-dependent business controls, including the completeness and accuracy of system-generated information used in business-process controls.
Evaluate how business controls depend on systems, integrations, configurations, reports and underlying ITGCs, and work with both business and IT control owners to resolve gaps.
Apply risk and controls thinking to modern engineering practices, including cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging.
Lead the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions.
Review third-party assurance reports and determine the impact of vendor controls and complementary user-entity controls on the Nebius control environment.
Maintain effective working relationships with external auditors and advisers, aligning on audit scope, evidence expectations, testing approaches, reliance opportunities, timelines and issue resolution.
Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners.
Use data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program.
Contribute to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model.
Provide clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.
We expect you to have:
A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience.
At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area.
Meaningful in-house technology or corporate ownership experience is required.
Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background will not be sufficient.
Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization.
Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment.
Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT.
Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation.
Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes.
Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies.
The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors.
Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions.
A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities.
Strong written and verbal English.
The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.
It will be an added bonus if you have:
A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification.
Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company.
Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment.
Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms.
Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems.
Experience onboarding acquired companies or newly implemented systems into SOX scope.
Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance.
Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Spain
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is seeking a
IT Risk & Controls Manager
to act as an embedded risk partner to our engineering and technology organizations.
You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.
This role goes beyond traditional IT audit testing. You will work directly with engineering leaders, system owners, Finance, Internal Controls and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation and embed compliance into the way our technology organizations operate.
The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders and aligning audit expectations with external assurance providers.
Your responsibilities will include:
Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies.
Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership.
Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight.
Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls that address risk while supporting operational efficiency.
Design, assess and enhance ITGCs across areas such as user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services.
Assess IT application controls, automated controls and IT-dependent business controls, including the completeness and accuracy of system-generated information used in business-process controls.
Evaluate how business controls depend on systems, integrations, configurations, reports and underlying ITGCs, and work with both business and IT control owners to resolve gaps.
Apply risk and controls thinking to modern engineering practices, including cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging.
Lead the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions.
Review third-party assurance reports and determine the impact of vendor controls and complementary user-entity controls on the Nebius control environment.
Maintain effective working relationships with external auditors and advisers, aligning on audit scope, evidence expectations, testing approaches, reliance opportunities, timelines and issue resolution.
Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners.
Use data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program.
Contribute to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model.
Provide clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.
We expect you to have:
A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience.
At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area.
Meaningful in-house technology or corporate ownership experience is required.
Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background will not be sufficient.
Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization.
Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment.
Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT.
Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation.
Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes.
Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies.
The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors.
Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions.
A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities.
Strong written and verbal English.
The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.
It will be an added bonus if you have:
A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification.
Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company.
Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment.
Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms.
Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems.
Experience onboarding acquired companies or newly implemented systems into SOX scope.
Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance.
Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Berlin, Germany
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is seeking a
IT Risk & Controls Manager
to act as an embedded risk partner to our engineering and technology organizations.
You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.
This role goes beyond traditional IT audit testing. You will work directly with engineering leaders, system owners, Finance, Internal Controls and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation and embed compliance into the way our technology organizations operate.
The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders and aligning audit expectations with external assurance providers.
Your responsibilities will include:
Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies.
Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership.
Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight.
Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls that address risk while supporting operational efficiency.
Design, assess and enhance ITGCs across areas such as user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services.
Assess IT application controls, automated controls and IT-dependent business controls, including the completeness and accuracy of system-generated information used in business-process controls.
Evaluate how business controls depend on systems, integrations, configurations, reports and underlying ITGCs, and work with both business and IT control owners to resolve gaps.
Apply risk and controls thinking to modern engineering practices, including cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging.
Lead the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions.
Review third-party assurance reports and determine the impact of vendor controls and complementary user-entity controls on the Nebius control environment.
Maintain effective working relationships with external auditors and advisers, aligning on audit scope, evidence expectations, testing approaches, reliance opportunities, timelines and issue resolution.
Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners.
Use data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program.
Contribute to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model.
Provide clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.
We expect you to have:
A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience.
At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area.
Meaningful in-house technology or corporate ownership experience is required.
Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background will not be sufficient.
Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization.
Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment.
Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT.
Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation.
Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes.
Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies.
The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors.
Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions.
A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities.
Strong written and verbal English.
The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.
It will be an added bonus if you have:
A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification.
Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company.
Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment.
Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms.
Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems.
Experience onboarding acquired companies or newly implemented systems into SOX scope.
Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance.
Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Remote - United States
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is seeking a
IT Risk & Controls Manager
to act as an embedded risk partner to our engineering and technology organizations.
You will help scale and strengthen a modern IT SOX and controls framework across Nebius’s custom-built AI cloud platform, infrastructure, corporate technology environment and other systems supporting financial reporting.
This role goes beyond traditional IT audit testing. You will work directly with engineering leaders, system owners, Finance, Internal Controls and external auditors to identify risk, design scalable controls, improve evidence quality, drive remediation and embed compliance into the way our technology organizations operate.
The successful candidate will combine deep IT risk and controls expertise with meaningful in-house technology experience. You must be equally comfortable discussing technical control design with engineers, explaining risk implications to business leaders and aligning audit expectations with external assurance providers.
Your responsibilities will include:
Act as the risk and controls partner for an assigned technology organization or system portfolio, developing a detailed understanding of its architecture, operations, risks and financial-reporting dependencies.
Own and continuously improve the relevant IT risk and control framework, including system scoping, risk assessment, RCM and control-catalogue maintenance, documentation and control ownership.
Lead IT SOX readiness for assigned systems, including walkthrough preparation, evidence-quality review, testing coordination, issue evaluation and remediation oversight.
Partner with engineering, platform, infrastructure, security and corporate IT teams to design and implement scalable controls that address risk while supporting operational efficiency.
Design, assess and enhance ITGCs across areas such as user access, privileged access, segregation of duties, change management, SDLC, system operations, incident management and third-party services.
Assess IT application controls, automated controls and IT-dependent business controls, including the completeness and accuracy of system-generated information used in business-process controls.
Evaluate how business controls depend on systems, integrations, configurations, reports and underlying ITGCs, and work with both business and IT control owners to resolve gaps.
Apply risk and controls thinking to modern engineering practices, including cloud infrastructure, DevOps, CI/CD, repositories, deployment processes, containerized environments and audit logging.
Lead the assessment and remediation of control gaps arising from new systems, major technology transformations, platform changes, integrations and acquisitions.
Review third-party assurance reports and determine the impact of vendor controls and complementary user-entity controls on the Nebius control environment.
Maintain effective working relationships with external auditors and advisers, aligning on audit scope, evidence expectations, testing approaches, reliance opportunities, timelines and issue resolution.
Translate complex technical risks and auditor requirements into practical guidance for engineering and system owners.
Use data analytics, automation, continuous monitoring and AI-assisted tools to improve control coverage, evidence quality and the efficiency of the IT SOX program.
Contribute to the development of IT controls methodology, standards, tooling, training, reporting and the broader Risk Partner operating model.
Provide clear, concise updates on control health, audit readiness, deficiencies and remediation progress to senior technology and Finance stakeholders.
We expect you to have:
A degree in Information Systems, Computer Science, Engineering, Accounting, Finance or a related discipline, or equivalent professional experience.
At least eight years of progressive experience in IT risk, IT controls, IT SOX, technology assurance, IT audit or a closely related area.
Meaningful in-house technology or corporate ownership experience is required.
Big Four or consulting experience is valuable when combined with subsequent in-house responsibility, but an exclusively advisory or external-audit background will not be sufficient.
Experience working in a first-line technology, engineering, systems or IT operations role, or as an embedded in-house risk partner supporting a technology organization.
Hands-on experience in an engineering-led technology, cloud, SaaS, platform or digital-product environment.
Strong practical knowledge of SOX 404, ITGCs, IT application controls, automated controls, COSO and COBIT.
Demonstrated experience with control design, implementation, monitoring, evidence review, audit readiness, issue evaluation and remediation.
Practical understanding of modern technology environments, including cloud infrastructure, IAM, DevOps, CI/CD, SDLC, software repositories, deployment practices, system integrations and container orchestration such as Kubernetes.
Experience connecting business-process controls to supporting systems, automated controls, IPEs/IUCs and underlying IT dependencies.
The ability to communicate effectively with engineers, technical leaders, Finance stakeholders and external auditors.
Strong judgment and the confidence to challenge control owners while developing practical, scalable solutions.
A highly autonomous and hands-on approach, with the ability to operate effectively in an evolving environment with incomplete processes and competing priorities.
Strong written and verbal English.
The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders.
It will be an added bonus if you have:
A professional certification such as CISA, CRISC, CISM, CIA, CPA or an equivalent qualification.
Experience building or materially transforming an IT SOX or technology-controls framework in a listed or pre-IPO technology company.
Experience in AI infrastructure, cloud platforms, large-scale SaaS, fintech, marketplaces or another engineering-intensive environment.
Experience with GRC and audit-management tools such as Workiva, Jira, ServiceNow GRC or similar platforms.
Experience with enterprise SaaS and financial systems such as NetSuite, HR platforms, billing systems, procurement tools or treasury systems.
Experience onboarding acquired companies or newly implemented systems into SOX scope.
Experience with control automation, continuous monitoring, data analytics or AI-assisted assurance.
Exposure to AI governance, AI/ML control environments or controls supporting AI-enabled development and operations.
#LI-DY1
Pay Transparency
We offer competitive compensation and benefits packages. Actual compensation will be determined based on job-related factors, including experience, skills, qualifications, the level at which the candidate is hired, and geographic location, consistent with applicable law.
Base Compensation Range
$120,000
—
$180,000 USD
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
УдалённоseniorГеография найма не уточнена
Amsterdam, Netherlands; Remote - Europe
УдалённоseniorRemote, Singapore; Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region
ОфисBoston, MA
seniorChicago
seniorLondon
London, United Kingdom; The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders
Spain; The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders
Berlin, Germany; The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders
УдалённоRemote - United States; The ability to work effectively across international time zones and travel when needed to build relationships with key technology and audit stakeholders
Автоотклики