GRC Engineer

New York City. Posted 3 months ago

The role

You will build the platform for Legora's assurance program by creating pipelines that collect evidence and automated checks for CI/CD. You will work within the Security organization to develop technical evidence bases for AI certifications and design agentic workflows for control testing.

What you will do

Build pipelines and integrations to aggregate control, asset, and identity data
Implement a unified controls library to satisfy multiple frameworks
Ingest data from Corporate Security technical controls and SaaS portfolio systems
Build the technical evidence base for AI certifications
Translate written policies and regulatory requirements into enforceable rules
Implement automated checks in CI/CD and infrastructure deployment
Instrument control effectiveness for risk posture reporting
Design and run agentic workflows for evidence analysis and audit response preparation

Required qualifications

6-8+ years spanning software or automation engineering and security compliance
Production-grade scripting (Python or similar) against APIs
Hands-on experience building LLM/agent workflows
Daily use of AI in your own work
GRC domain fluency in SOC 2 / ISO 27001 control language
Clear technical writing

Nice to have

Experience with compliance platform APIs
OSCAL or other machine-readable control/catalog formats
Infrastructure-as-code (Terraform or similar)
CI/CD pipeline engineering
Prior work on AI product assurance: evals, red-teaming evidence, or model/agent documentation

Benefits

Medical, Dental & Vision
Multiple medical plan options through Aetna and Kaiser Permanente
HSA or Healthcare FSA
Dental plans via MetLife
Vision plans via Vision Care
Generous parental leave
Free access to Maven Clinic
Dependent Care FSA
Free One Medical membership for employees and dependents
Pre-tax commuter benefits
Life Insurance + STD/LTD
401(K) with generous company match

About the company

Legora is an AI-native workspace for legal professionals. The company has 2,100+ customers across 80+ countries and has scaled to $200M+ in ARR.