Hiring: GRC Engineer Company: Legora Location: New York, NY Job Posted Time: 2026-09-13 14:44:59 Target Skills & Keywords : CI/CD, LLM, Maven, Python, SOC 2, SaaS, Terraform About the job Experience: •8+ years spanning software or automation engineering and security compliance — an engineer who learned GRC, or a GRC operator who became a builder. Required Skills: •Build the platform Legora’s assurance program runs on: pipelines that collect evidence continuously, checks that enforce policy in CI/CD, and agents that test controls and draft audit responses. The GRC Lead owns the program and the judgment calls; you own the machinery that turns certifications into an output of normal operations. •Sit in the Security organization and work daily with the GRC Lead, Engineering, and Corporate Security. This is an engineering seat with a compliance domain, and it exists because we sell AI agents to law firms: proving how our systems behave is part of the product. •Build the pipelines and integrations that aggregate control, asset, and identity data across our stack (cloud, IdP, HRIS, source control, CI/CD) and turn it into automated checks, live dashboards, and audit evidence. •Implement the unified controls library so one control satisfies many frameworks, with evidence collected once and mapped everywhere. •Ingest from what partners already own — Corporate Security’s technical controls, the SaaS portfolio’s system of record — rather than building parallel collectors; system owners keep their evidence, your platform makes it audit-ready. •Build the technical evidence base for our AI certifications (ISO/IEC 42001 and emerging AI-agent assurance standards): agent action logging, evaluation evidence, tool-call restrictions, and failure-mode documentation, working with Product and Engineering. •Translate written policies and regulatory requirements into enforceable rules: automated checks in CI/CD and infrastructure deployment, continuous controls monitoring, and drift alerts routed to owners. •Instrument control effectiveness so the GRC Lead reports risk posture from live data. Qualifications: •OSCAL or other machine-readable control/catalog formats. •Infrastructure-as-code (Terraform or similar) and CI/CD pipeline engineering. •Prior work on AI product assurance: evals, red-teaming evidence, or model/agent documentation. •Global collaboration: Partner with teams and clients across Europe, APAC, and North America. •Competitive package: Comprehensive salary, benefits, and tools for success. •Meaningful work: Your efforts shape how thousands of lawyers use AI daily. •In-person environment: Union Square office designed for ambitious builders and company provided lunch daily. •Multiple medical plan options through Aetna and Kaiser Permanente •HSA or Healthcare FSA (based on plan selection) •Vision plans via Vision Care Compensation: •$151,000 - $273,000 / year •401(K) with generous company match Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!