Legora

GRC Lead

New York City. Posted 3 months ago

The role

You will own the assurance program end to end, including certifications, AI governance, and risk decisions. You will manage SOC 2, ISO 27001, and ISO/IEC 42001 certifications and operate the AI governance program.

What you will do

  • Own SOC 2 Type II, ISO 27001, and ISO/IEC 42001 certifications
  • Own the AI-agent assurance roadmap
  • Design and maintain a unified controls library
  • Act as the authoritative source for the Customer Trust team
  • Operate the AI governance program including risk classification and NIST AI RMF alignment
  • Track the AI regulatory landscape and translate it into concrete controls
  • Own the enterprise risk register and risk reporting
  • Own the policy lifecycle
  • Own the BCDR program including business impact analysis and recovery tests

Required qualifications

  • 6+ years in GRC, security compliance, or IT audit
  • At least one B2B SaaS environment where you owned SOC 2 and/or ISO 27001 end to end
  • Working knowledge of AI governance frameworks (ISO 42001, NIST AI RMF) and the EU AI Act, or a demonstrated ability to get deep in a new regulatory domain fast
  • A continuous-assurance operating model
  • Ability to read code and infrastructure-as-code well enough to verify a control yourself
  • Experience running enterprise risk processes that leadership uses to make decisions
  • Clear, precise writing
  • Use AI tools daily in your own work

Nice to have

  • ISO 42001 Lead Auditor
  • ISO 27001 Lead Auditor
  • CISA
  • CISSP (or equivalent experience)
  • Experience selling trust to law firms, financial services, or other heavily regulated buyers
  • Experience with GDPR/CCPA and cross-border data transfer requirements
  • Exposure to AI-agent assurance or certification of AI products
  • Exposure to public-sector assurance (e.g., FedRAMP, IRAP)

Benefits

  • Medical, Dental & Vision
  • Multiple medical plan options through Aetna and Kaiser Permanente
  • HSA or Healthcare FSA
  • Dental plans via MetLife
  • Vision plans via Vision Care
  • Generous parental leave
  • Free access to Maven Clinic
  • Dependent Care FSA
  • Free One Medical membership for employees and dependents
  • Pre-tax commuter benefits
  • Life Insurance + STD/LTD
  • 401(K) with generous company match

About the company

Legora is redefining how legal work gets done with an AI-native workspace. They serve over 2,100 customers across 80+ countries.