The role

We are seeking a Compliance Due Diligence Specialist to further improve our Third-Party Risk Management (TPRM) and due diligence assessment framework and processes. This person will be responsible for day-to-day execution of due diligence assessments for various third parties.

This role is ideal for someone with a solid compliance due diligence foundation who wants to dig down to investigating third parties, contribute to process improvements, and help scale a modern compliance function in a fast-growing tech environment.

You will work closely with Ethics & Compliance, Legal, HR, and varrious other business and technology teams to ensure compliance is practical, efficient, and embedded into business operations.

Your responsibilities will include: 

• Conduct third-party due diligence assessments, including risk scoring, screening, verification, and documentation of third-party risk profiles
• Perform name screening against sanctions, PEP, adverse media, and related lists, and coordinate resolution of positive matches within established timelines
• Manage internal due diligence for medium and high-risk third parties, including desktop checks, review of ownership structures, beneficial owners, and site visits where feasible
• Coordinate external due diligence questionnaires for high-risk third parties, reviewing responses related to corporate structure, governance controls, human rights safeguards, ESG data, and compliance declarations
• Identify and escalate red flags, including sanctions exposure, bribery and corruption risk, modern slavery indicators, Zero Connections concerns, and geopolitical risks
• Maintain the Third-Party Risk Register, ensuring accurate documentation of risk scores, due diligence records, mitigation actions, and reassessment schedules
• Perform monthly compliance reconciliations, including sample-based quality checks of completed assessments, verification of scoring accuracy, and adherence to reassessment schedules
• Help identify training needs across the organization and support development and delivery of compliance training and awareness initiatives
• Contribute to process improvement and automation initiatives, making compliance processes more efficient and scalable

We expect you to have: 

• Relevant level of education and certifications (i.e. CFE, CAMS etc.)
• Minimum of 4 years experience in performing due diligence, KYC assessments or investigations
• Experience working within a corporate compliance program
• Experience in data center, AI or relevant technology companies
• Good understanding of core compliance topics (e.g. COI, ABAC, third-party risk, sanctions)
• Familiarity with compliance and third party risk assessment methodologies
• Strong organizational and analytical skills
• Hands-on and proactive, Interested in building and improving processes,
• Structured and detail-oriented, but pragmatic
• Strong communication skills and ability to work cross-functionally

It will be an added bonus if you have: 

• Experience with compliance tools or workflow systems
• Experience with Dow Jones RiskCenter or similar third-party risk management platforms
• Exposure to automation or process improvement initiatives
• Experience in a fast-paced, international / listed, or tech environment

The role

We are seeking a strategic and hands-on Third-Party Risk Management (TPRM) Lead to design, build, and lead a best-in-class global TPRM function. This role will be responsible for establishing the framework, governance, and operating model to identify, assess, mitigate, and monitor risks associated with third parties (including customers) across diverse business models, including B2B and B2C.

The role also encompasses oversight of customer and partner risk and compliance domains, including Anti-Bribery & Corruption (ABAC), Sanctions, Export Controls, Anti-Money Laundering (AML), Human Rights, and responsible/ethical AI considerations. A key dimension of the role includes embedding industry risk assessments (e.g., high-risk sectors, dual-use technologies, regulated industries) into onboarding, due diligence, and ongoing monitoring processes.

A critical component of the role includes supporting third-party and due diligence efforts in the context of mergers and acquisitions (M&A), ensuring that external risks are effectively evaluated and integrated into deal decision-making and post-transaction planning.

This role will play a key part in scaling and maturing Nebius’ TPRM capabilities in line with rapid business growth and evolving regulatory expectations.

Your responsibilities will include: 

Strategy & Leadership

• Design and implement Nebius’ global Third-Party, Customer, and Customer Risk Management framework, incorporating industry risk, aligned with regulatory expectations and industry best practices
• Build and lead a high-performing risk team spanning third-party, customer, and partner risk domains
• Act as an advisor on risk exposure (vendors, customers, partners, resellers, distributors) across industries and geographies
• Define and track KPIs/KRIs to measure program effectiveness and maturity
• Define and implement TPRM systems, tooling, and workflow automation to support scalable onboarding, due diligence, and monitoring processes

Third-Party, Customer, Partner & Industry Risk Lifecycle Management

• Establish end-to-end processes for onboarding, risk assessment, due diligence, contracting, monitoring, and offboarding across:
• Third-party vendors and suppliers
• Customers (B2B and B2C)
• Intermediaries such as partners, resellers, distributors, and agents
• Develop risk tiering methodologies that incorporate:
• Relationship type (supplier, customer, intermediary)
• Business model (B2B, B2C)
• Industry/sector risk (e.g., financial services, pharmaceutical, crypto, AI, telecommunications)
• Geographic exposure and regulatory risk
• Oversee due diligence processes, including KYC/KYB, beneficial ownership analysis, sanctions screening, and industry risk profiling
• Implement enhanced due diligence for high-risk industries, intermediaries, and jurisdictions
• Ensure ongoing monitoring, including adverse media screening, transaction-based triggers, sector-specific red flags, and periodic reviews
• Integrate risk processes with procurement, sales, partnerships, legal, compliance, and security functions

Compliance & Industry Risk

• Lead and oversee compliance frameworks and controls across:
• Anti-Bribery & Corruption (ABAC), with emphasis on high-risk industries and third-party intermediaries
• Sanctions compliance, including sectoral sanctions and restricted industries
• Export controls, including dual-use goods/technology and industry-specific restrictions
• Anti-Money Laundering (AML) / Counter-Terrorist Financing (CTF), including sector-driven risk indicators
• Human Rights & ESG risks, including supply chain exposure in high-risk industries
• Responsible AI risk, including use cases and customers in sensitive or regulated sectors
• Provide risk guidance on entering or expanding into higher-risk industries or customer segments
• Escalate material risks to senior governance forums and recommend mitigation or risk acceptance strategies

M&A Due Diligence

• Lead third-party, customer, partner, and industry risk due diligence for M&A transactions
• Partner with corporate development, regulatory and business teams to assess:
• Vendor and supplier ecosystems
• Customer portfolios (B2B and B2C exposure)
• Partner, reseller, and distribution networks
• Industry concentration risks and exposure to high-risk sectors
• Exposure to sanctions, AML, ABC, export control, human rights, and AI-related risks
• Identify potential liabilities, contractual risks, and compliance gaps, including those driven by industry exposure
• Support integration planning by aligning acquired entities with Nebius’ risk and compliance standards

Governance, Risk & Reporting

• Develop and maintain policies, standards, and procedures covering third-party, customer, partner, and industry risk
• Ensure compliance with applicable regulations and standards (e.g., AML directives, sanctions regimes, export control laws, ESG frameworks, AI governance standards)
• Prepare reporting and materials for senior management, risk committees, and board-level stakeholders, including insights on industry risk exposure

Stakeholder Management

• Collaborate closely with Procurement, Sales, Legal, Compliance, Information Security, Privacy, Finance, and business units
• Act as the primary point of contact for third-party, customer, partner, and industry risk matters across the organization
• Engage with partners, and auditors as needed

Technology & Data

• Leverage existing screening tools (e.g., Dow Jones) and enhance their use within the broader TPRM framework
• Define and implement scalable workflows, automation, and system integrations to support third-party and customer risk management
• Drive the evolution of TPRM tooling and data capabilities in line with business growth

We expect you to have: 

• Degree in business, law or relevant compliance field
• 10+ years of experience in third-party risk, financial crime compliance, or enterprise risk management
• Proven experience building and scaling TPRM and/or customer due diligence programs in a global organization
• Strong expertise in ABAC, sanctions, export controls, and broader compliance frameworks
• Experience managing risk across different business models (B2B, B2C) and complex partner ecosystems (resellers, distributors, agents)
• Experience supporting M&A transactions, including due diligence and integration
• Deep understanding of regulatory expectations across key jurisdictions (e.g., EU, US, UK)

Competencies:

• Demonstrated leadership experience, including building and managing teams
• Strategic thinker with strong execution capabilities
• Excellent stakeholder management and communication skills, including at senior management
• Strong analytical, investigative, and risk assessment skills
• Ability to operate in a dynamic, high-growth environment
• High level of integrity and sound judgment

The role

We are seeking a Regulatory Counsel to join the Ethics and Compliance team to support our trade controls program across the US and EMEA operations. In this role, you will provide strategic advice on global trade controls, including export controls and sanctions, while also contributing to emerging regulatory challenges affecting AI, cloud, and digital infrastructure (including data center operations).

You will work cross-functionally with product, engineering, sales, and operations teams; coordinate with outside counsel on complex regulatory matters; and have significant latitude to shape our approach to regulatory challenges. We’re a remote-first organization with global team members, so you’ll need to be comfortable working across time zones and cultures.

Your responsibilities will include: 

• Advise on US export control (EAR) and sanctions (OFAC) compliance, as well as EU/UK export controls or sanctions where applicable, for AI cloud infrastructure services, including license exception eligibility and deemed export considerations.
• Provide legal guidance on escalated restricted party screening issues and advise on regulatory risks associated with business partner onboarding and transaction reviews.
• Advise on export classifications, licensing assessments, jurisdiction and classification, deemed export compliance, and foreign national access to controlled technology.
• Advise on export control implications of cross-border technology transfers and access to controlled technical data across US and EMEA jurisdictions.
• Monitor regulatory developments (US, UK, EU, and relevant member-state regimes) affecting technology exports, sanctions regimes, AI systems, and cloud services; assess impact and recommend policy responses.
• Advise on compliance processes, policies, and internal guidance materials; coordinate with outside counsel as needed.
• Collaborate with stakeholders to integrate compliance into business operations; support regulatory incident response, including internal reviews related to potential export controls or sanctions issues.

We expect you to have: 

• JD from an accredited law school and admission to practice in at least one U.S. jurisdiction (or eligibility to in-house registration); UK/EU qualifications considered.
• 3-6 years of relevant experience. Familiarity with encryption classifications (e.g., License Exception ENC) is a plus.
• Demonstrated ability to apply complex regulations to products, services, and business operations and advise on applicable regulatory risks.
• Excellent analytical, written, and verbal communication skills, stakeholder management, and ability to explain complex regulations to technical and business audiences, including working effectively across time zones with globally distributed teams.
• High level of integrity and ability to manage multiple priorities in fast-paced environment.

It will be an added bonus if you have: 

• Experience in a highly regulated, high-growth, or global technology environment.
• Experience with national security-related technology controls or review processes is a plus.

We are looking for someone business-minded who is forward-thinking, pragmatic, and comfortable with uncertainty.

We offer competitive salaries, ranging from 156k - 236k OTE (On Target Earnings) + equity based on your experience.

The role

We are seeking an Ethics & Compliance Specialist to support the development , implementation, and and day-today execution of its global Ethics & Compliance program.

This role is ideal for someone with a solid compliance foundation who wants to work across multiple compliance areas, contribute to process improvements, and help scale a modern compliance function in a fast-growing tech environment.

You will work closely with Ethics & Compliance, Legal, HR, and varrious other business and technology teams to ensure compliance is practical, efficient, and embedded into business operations.

Your responsibilities will include: 

• Support the implementation and ongoing management of the compliance program across multiple areas, including:

• Conflict of Interest “COI”
• Third-Party Risk Management
• Anti-Bribery & Corruption
• Gifts & Entertainment
• Training & awareness

• Assist in reviewing compliance matters and business requests, ensuring alignment with company policies
• Support COI handling, third-party due diligence, and internal compliance workflows (intake, tracking, documentation)
• Help identify training needs across the organization and support development and delivery of compliance training and awareness initiatives
• Contribute to process improvement and automation initiatives, making compliance processes more efficient and scalable
• Support the development of compliance playbooks and practical guidance materials (e.g. for third-party onboarding, events, sponsorships, COI handling)
• Support monitoring and testing of compliance controls, including preparation for internal reviews or audits
• Assist with compliance reporting, including preparation of materials for management and Board-level reporting
• Collaborate with cross-functional teams (Legal, HR, Procurement, Sales) on compliance-related topics
• Promote a strong culture of ethics and integrity, supporting transparent communication and ethical decision-making across the business

We expect you to have: 

• Degree in business, law or a relevant compliance field
• Minimum of 4 experience in compliance roles
• Experience working within a corporate compliance program
• Good understanding of core compliance topics (e.g. COI, ABAC, third-party risk, sanctions basics)
• Strong organizational and analytical skills
• Hands-on and proactive, Interested in building and improving processes,
• Structured and detail-oriented, but pragmatic
• Strong communication skills and ability to work cross-functionally

It will be an added bonus if you have: 

• Experience with compliance tools or workflow systems
• Exposure to automation or process improvement initiatives
• Experience in a fast-paced, international / listed, or tech environment