About Nebius

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.

Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.

Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.

The role

The Legal Counsel provides senior, practical, risk-based legal counsel at the intersection of cybersecurity, Artificial Intelligence, cloud compute and services, physical security, supply chain and technology oriented regulatory compliance. The counsel will work closely with Security teams to support their efforts to address the needs of the company's various business units, and enable the attainment of the company's business and product objectives while protecting the company from obligations that are unclear, disproportionate, operationally unachievable, or inconsistent with the company’s security posture. The role is expected to lead cross-functional initiatives, not only respond to individual legal requests.

Your responsibilities will include

Security terms in customer contracts

Review, draft, and negotiate cybersecurity, physical security compliance, , supply chain and resilience provisions in customer documents, including MSAs, DPAs, security addenda, order forms, and related schedules.
Advise on security-control commitments, audit and assessment rights, incident-notification obligations.penetration testing, business continuity, data retention and deletion, subcontractors, cloud services, and allocation of liability.
Translate technical controls and architecture into clear, supportable contractual language without overstating capabilities or creating unbounded obligations.
Advise Product and Engineering on customer-driven requirements and translate recurring negotiations into scalable product, policy, and commercial positions.
Support Sales and Customer Success with timely, commercially pragmatic guidance during strategic and high-value transactions.

Certifications, audits, and external assurance

Provide legal support for security certifications, attestations, and assurance programs, such as ISO 27001, SOC 2, PCI DSS, or other frameworks relevant to the company.
Review certification scope, statements, evidence-sharing terms, management representations, auditor engagement terms, confidentiality obligations, and external communications.
Help ensure that customer-facing descriptions of certifications and controls are accurate, current, and do not imply broader coverage than the underlying assessment supports.
Partner with Security and Compliance on remediation plans, audit findings, regulator or customer inquiries, and the controlled disclosure of reports and evidence.

Security governance, regulatory advice, and risk

Managing DORA, NIS2, CRA frameworks, serving as principal point of contact with authorities in this respect.
Monitor and interpret cybersecurity, operational resilience digital-services, and technology requirements applicable to the company’s products, services, customers, and geographic footprint.
Assist in supporting physical security units
Assist the company GRC to advise on security policies, standards, risk acceptance, third-party risk, cloud governance, secure development practices, vulnerability disclosure, and responsible use of emerging technologies, including AI where applicable.
Participate in security and product governance forums and provide legal input to material risk decisions, secure development practices, control exceptions, product launches, vendor onboarding, and significant architecture or service changes.