About the company
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment.
Responsibilities
- Own the Nebius vendor security standards framework, ensuring it is current, comprehensive, and enforceable across all vendor categories.
- Maintain and continuously update vendor-facing security requirements, obligations, and compliance benchmarks.
- Define and enforce a zero tolerance compliance policy across all vendor security obligations.
- Ensure all vendors are formally onboarded against NGSCS security standards.
- Work with NGSCS leadership, legal, and procurement to ensure vendor security requirements are embedded in contracts and service agreements.
- Conduct regular, unannounced, and scheduled on-site compliance inspections at vendor facilities, transit points, and operational environments globally.
- Physically verify that vendor security controls, procedures, and behaviours align with Nebius standards.
- Assess vendor compliance against TAPA FSR, TAPA TSR, and NGSCS-specific requirements.
- Document all inspection findings with precision.
- Identify systemic compliance risks across the vendor network and escalate to NGSCS leadership.
- Issue formal corrective action notices to non-compliant vendors.
- Track and verify the completion of all corrective actions.
- Re-inspect vendor sites following corrective action.
- Maintain a global vendor compliance register.
- Escalate persistent or severe non-compliance to the Head of Global Supply Chain Security.
- Serve as the primary NGSCS point of contact for all vendor security compliance matters globally.
- Communicate Nebius security expectations clearly and assertively to vendor security and operations leadership.
- Conduct structured vendor security reviews and performance assessments.
- Drive a culture of security accountability across the vendor network.
- Support the onboarding of new vendors by assessing security posture prior to operational activation.
- Produce regular global vendor compliance reports for NGSCS leadership.
- Identify patterns of non-compliance across vendors or regions and recommend systemic improvements.
- Contribute to the continuous improvement of NGSCS vendor security standards.
- Provide input to NGSCS policy updates, SOPs, and vendor-facing documentation.
Requirements
- Rigorous and assertive.
- Experience in vendor security and standards management.
- Knowledge of TAPA FSR, TAPA TSR.
- Ability to conduct on-site compliance inspections globally.
- Strong communication skills.
Conditions
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams