The role

We’re looking for a Security Product Manager to join our team. Security Product Manager is responsible for conveying the company’s security strengths to customers, partners and the market at large. This includes participating in relevant security partnership initiatives, influencing security positioning and branding, and working closely with internal teams to ensure company’s security posture and security products is communicated effectively to all stakeholders. By combining expertise in compliance requirements with a customer-centric approach, Security Product Manager helps position security as a competitive advantage rather than just an internal obligation. 

Your responsibilities will include: 

1. Product Management 

• Define the vision and roadmap for Nebius’ security products. 
• Owning the ideation, postmortem, prioritization, backlog, and customer feedback processes. 
• Guiding new features, systems and services from inception to launch, while keeping customers at the center of everything. 

2. Customer-facing communications 

• Lead public-facing communications around security updates or changes in compliance status. 
• In the event of a security incident, coordinate user messaging (email notifications, press releases, FAQs) with support from the Head of Security Products and CISO. 
• Gather user feedback on user experience and security to guide continuous improvements. 

 3. Competitive analysis and market research 

• Conduct ongoing research on industry benchmarks, emerging security standards and technologies, and competitor certifications. 
• Identify gaps and opportunities in organization’s product security posture; propose strategic initiatives that differentiate the company’s security story in the market. 
• Stay informed about new regulations or frameworks that may influence future product certifications or transparency requirements (e.g., privacy laws, data sovereignty standards). 

 4. Certification and audit support, service ownership 

• Collaborate with the CISO office to gather technical evidence or make necessary product enhancements that satisfy certification requirements. 
• Take ownership of some security-related services of Cloud platform. 
• Track and maintain a certification roadmap (ISO 27001, SOC 2, HIPPA, etc.), working closely with CISO, GRC & Compliance, Corporate Security departments. Communicate timelines, goals and status updates to leadership and sales representatives. 

5. Cross-functional collaboration 

• Coordinate with multiple Product Managers to align security goals with other product roadmaps, ensuring a consistent narrative between product security and external messaging. 
• Work with Platform Security, GRC & Corporate Security and legal teams to gather essential information for security products enhancements (e.g., penetration test summaries, compliance reports). 
• Work with Customer-facing teams to address client inquiries about security posture and guide them on using security features optimally. 

We expect you to have: 

• 3+ years of Product Management or Program Management experience with a focus on security initiatives. 
• Basic knowledge of compliance frameworks (e.g., SOC 2, ISO 27001, GDPR) and familiarity with how they translate into business value. 
• Proven ability to communicate technical concepts in a clear, customer-friendly manner (e.g., writing content, speaking at webinars or conferences). 
• Stakeholder management skills to align with other Product Managers, CISO staff, engineering, marketing, and customer-facing teams. 
• Analytical mindset: comfortable defining success metrics (e.g., security feature adoption, NPS around trust, certification progress) and making data-driven decisions. 
• Project management skills: demonstrated ability to manage inter-team collaboration within company-wide projects, ensuring timely delivery of cross-functional tasks and alignment with compliance goals. 

It will be an added bonus if you have: 

•  Certifications such as CISSP, CISM, or PMP; prior experience in regulated industries; prior experience working for Cloud Service Provider.

About Nebius

Nebius AI is an AI cloud platform with one of the largest GPU capacities in Europe. Launched in November 2023, the Nebius AI platform provides high-end, training-optimized infrastructure for AI practitioners. As an NVIDIA preferred cloud service provider, Nebius AI offers a variety of NVIDIA GPUs for training and inference, as well as a set of tools for efficient multi-node training. 

Nebius AI owns a data center in Finland, built from the ground up by the company’s R&D team and showcasing our commitment to sustainability. The data center is home to ISEG, the most powerful commercially available supercomputer in Europe and the 16th most powerful globally (Top 500 list, November 2023).  

Nebius’s headquarters are in Amsterdam, Netherlands, with teams working out of R&D hubs across Europe and the Middle East. 

Nebius AI is built with the talent of more than 500 highly skilled engineers with a proven track record in developing sophisticated cloud and ML solutions and designing cutting-edge hardware. This allows all the layers of the Nebius AI cloud – from hardware to UI – to be built in-house, distictly differentiating Nebius AI from the majority of specialized clouds: Nebius customers get a true hyperscaler-cloud experience tailored for AI practitioners. We’re growing and expanding our products every day. 

If you’re up to the challenge and are excited about AI and ML as much as we are, join us!

THE ROLE

As an Operational Resilience Analyst, you will be the engine behind our GRC and Enterprise Resilience programs, ensuring that identified risks turn into permanent fixes. You will take the lead on our Corrective and Preventive Action (CAPA) program, transforming findings from audits and incidents into a clear roadmap for improvement. Working alongside seasoned experts, you will help protect our global operations by coordinating the data and documentation that keep Pure Storage prepared for any challenge.

WHAT YOU’LL DO

• Manage the Remediation Lifecycle: Drive the day-to-day operations of the CAPA program by triaging new findings, assigning owners, and chasing blockers to ensure every corrective action is resolved accurately and on schedule.
• Coordinate Resilience Documentation: Partner with technical teams to gather data for Business Impact Assessments (BIAs) and keep Disaster Recovery (DR) runbooks current, ensuring our recovery plans reflect the latest technical environments.
• Administer GRC Systems: Serve as the hands-on administrator for our resilience tools (like Riskonnect), maintaining a clean "source of truth" and generating reports that help stakeholders understand our current risk posture.
• Support Preparedness Exercises: Organize the logistics for tabletop exercises and drills, capturing real-time notes and "after-action" insights to feed back into our continuous improvement cycle.
• Track & Report Progress: Monitor key performance indicators (KPIs) related to finding closures and documentation accuracy, preparing concise summaries that highlight successes and areas needing attention.

WHAT YOU BRING

• Foundational GRC Experience: You have a background in GRC, IT Audit, Business Continuity, or Security Operations where you have successfully managed task tracking, issue remediation, or control follow-ups.
• Process-Oriented Mindset: You are highly organized and comfortable using GRC tools or advanced spreadsheets to manage large volumes of data without letting details slip through the cracks.
• Proactive Collaboration: You possess the communication skills to follow up with busy technical owners and the ability to document complex processes in a simple, clear, and auditable format.
• Growth and Ownership Mentality: You have an active interest in learning and applying global frameworks—such as ISO 27001, ISO 22301, or NIST—to help a world-class tech company maintain its operational edge.

We are primarily an in-office environment and therefore, you will be expected to work from the Prague office in compliance with Pure’s policies, unless you are on PTO, or work travel, or other approved leave.