GRC Program Coordinator

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role The GRC Program Coordinator works across security risk management, strategic certification and regulatory programs, and other governance, risk, and compliance activities as they arise. This is a hands-on role that combines program execution with real GRC subject-matter knowledge: the person in this role is expected to understand security and compliance concepts well enough to contribute professional judgment, not only to coordinate schedules and trackers. The scope spans multiple concurrent programs and will grow to include new initiatives over time. Your responsibilities will include Program Execution • Support the planning, tracking, and execution of strategic certification and regulatory programs: milestones, owners, due dates, and status across multiple concurrent workstreams. • Coordinate evidence collection, documentation, and readiness activities in support of certification and audit cycles. • Support engagement with external assessors, auditors, and vendors, including scheduling, correspondence, and tracking of deliverables against agreed timelines. Security Risk Support • Contribute to security risk assessment activities: help identify, assess, and document risks, and support the maintenance of the risk register. • Support risk mitigation and follow-up activities, including tracking corrective actions through to closure and helping confirm that remediation is effective, not just logged as complete. • Help prepare risk and program status materials for internal review. General GRC Support • Take on additional governance, risk, and compliance activities as priorities evolve, applying sound judgment on how a given task fits existing frameworks and processes. • Maintain organized, audit-ready documentation across the programs and activities supported. • Identify opportunities to improve tracking, reporting, and process efficiency across the programs supported. We expect you to have • 2-4 years of experience in information security, GRC, compliance, IT risk, or a closely related field. • Working knowledge of information security and compliance concepts (e.g., risk assessment, control frameworks, certification or audit cycles) sufficient to engage substantively with the work, not only to track it. • Strong organizational skills and comfort managing multiple concurrent workstreams with different cadences and stakeholders. • Clear written and verbal communication; able to synthesize status and findings accurately from multiple sources. • Proficiency with common tracking and documentation tools (e.g., Jira, Excel/spreadsheets); Confluence familiarity a plus. • Discretion with sensitive compliance and security information. • Genuine interest in growing into broader ownership of risk and program work over time. • Prior exposure to security certifications (e.g., ISO 27001, SOC 2), risk frameworks, or regulatory compliance programs is an advantage, not a requirement. • Bachelor's degree in information security, computer science, engineering, or a related field