Head of Security Reliability

Nebius is looking for a Head of Security Reliability to establish and lead the Security Reliability pillar. Reporting directly to the CISO, this leader will be accountable for the ongoing effectiveness, resilience, and operational maturity of Nebius security products after implementation.

The role ensures that security platforms remain properly configured, maintained, integrated, monitored, adopted, and optimized to deliver measurable risk reduction. It also owns Nebius's Third-Party Risk Management (TPRM) program and the security-review process for new products, services, and technologies introduced across the company.

This is a hands-on leadership position for someone who combines security expertise, operational discipline, vendor-management experience, and a strong product mindset. The role partners closely with Security, IT, Engineering, Product, Procurement, Legal, Privacy, Compliance, and business stakeholders.

Security product reliability and lifecycle ownership

• Own security products and platforms after implementation, from operational handover through optimization, renewal, replacement, or retirement.
• Ensure security tools are correctly configured, maintained, integrated, monitored, and aligned with Nebius's risk profile and technical environment.
• Define ownership, service levels, operating procedures, support models, and escalation paths for every security platform.
• Monitor platform availability, data quality, control coverage, integration health, licensing, capacity, and performance.
• Establish disciplined processes for upgrades, configuration changes, testing, exception management, and end-of-life planning.
• Continuously assess whether security products deliver their intended outcomes, and improve utilization, coverage, automation, and return on investment.
• Reduce overlapping capabilities, configuration drift, operational gaps, and underused tooling across the security stack.
• Manage vendor performance, technical escalations, product-roadmap discussions, renewals, and service reviews.
• Ensure newly implemented security products transition into operations with clear documentation, ownership, monitoring, and success criteria.

Security configuration and control assurance

• Define and maintain secure configuration baselines for security platforms.
• Establish continuous control-health monitoring to identify disabled, degraded, misconfigured, or incomplete controls.
• Validate that integrations and telemetry remain complete, accurate, and reliable as Nebius's environment evolves.
• Coordinate remediation of control gaps with Security, IT, Engineering, and platform owners.
• Maintain evidence demonstrating the operational effectiveness of security controls for audits, certifications, and customer-assurance activities.

Security reviews for new products and technologies

• Lead the security-review process for new products, services, platforms, and technologies being introduced at Nebius.
• Engage early with Product, Engineering, IT, Procurement, and business teams to identify security requirements and risks.
• Review proposed solutions across architecture, identity and access, data protection, logging, integrations, cloud configuration, resilience, and third-party dependencies.
• Provide pragmatic, risk-based recommendations that enable teams to move forward securely.
• Define approval criteria and ensure identified risks have clear owners, remediation plans, compensating controls, or formally documented acceptance.
• Establish reusable standards, questionnaires, patterns, and workflows to improve review consistency and turnaround time.
• Ensure approved products transition into the appropriate operational, monitoring, and risk-management processes.

Leadership and governance

• Build, lead, and develop a high-performing Security Reliability team.
• Define the pillar's strategy, roadmap, operating model, priorities, budget, and success measures.
• Create clear accountability across internal teams and external service providers.
• Give the CISO and senior leadership clear visibility into control health, tooling effectiveness, third-party exposure, and material risks.
• Support incident response when failures, misconfigurations, or third-party services contribute to an incident.
• Drive automation and data-informed decision-making across security operations and risk-management processes.
• Promote a culture of operational ownership, continuous improvement, and measurable security outcomes.

Success in this role will be measured through outcomes such as:

• Availability, reliability, and coverage of security platforms.
• Reduction in configuration drift and degraded or ineffective controls.
• Improved utilization and measurable value from security investments.