{"id":208675,"url":"https://alion.io/job/legora-grc-engineer","title":"GRC Engineer","company":{"id":48110,"name":"Legora","domain":"legora.com","url":"https://alion.io/company/legora","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":86,"open_postings":77,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-09-26T05:45:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":151000,"max":273000,"currency":"USD","period":"year","gross":null,"usd_annual":273000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-07-23T19:04:12Z","employer_posted_date":"2026-07-23","last_verified_at":"2026-09-27T03:19:54Z","board_verified":true,"closed_at":null,"days_open":65,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":65},"description":"About Us\nLegora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.\nOur AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.\n1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.\nWe partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.\nJoining Legora means three things.\nWe lean in: ownership over titles, outcomes over intentions.\n\nWe fight for excellence: high standards, direct, ego-free feedback.\n\nWegrow together: as a team and with our customers.\n\nMission before ego. Everyone contributes. No one coasts.\nIf you’re driven by impact, pace, and raising the bar. This is the place.\nABOUT THE ROLE\nYou will build the platform Legora’s assurance program runs on: pipelines that collect evidence continuously, checks that enforce policy in CI/CD, and agents that test controls and draft audit responses. The GRC Lead owns the program and the judgment calls; you own the machinery that turns certifications into an output of normal operations.\nYou will sit in the Security organization and work daily with the GRC Lead, Engineering, and Corporate Security. This is an engineering seat with a compliance domain, and it exists because we sell AI agents to law firms: proving how our systems behave is part of the product.\nWHAT YOU’LL DO\nEvidence & controls platform\nBuild the pipelines and integrations that aggregate control, asset, and identity data across our stack (cloud, IdP, HRIS, source control, CI/CD) and turn it into automated checks, live dashboards, and audit evidence.\n\nImplement the unified controls library so one control satisfies many frameworks, with evidence collected once and mapped everywhere.\n\nIngest from what partners already own - Corporate Security’s technical controls, the SaaS portfolio’s system of record - rather than building parallel collectors; system owners keep their evidence, your platform makes it audit-ready.\n\nBuild the technical evidence base for our AI certifications (ISO/IEC 42001 and emerging AI-agent assurance standards): agent action logging, evaluation evidence, tool-call restrictions, and failure-mode documentation, working with Product and Engineering.\n\nContinuous assurance & agentic workflows\nTranslate written policies and regulatory requirements into enforceable rules: automated checks in CI/CD and infrastructure deployment, continuous controls monitoring, and drift alerts routed to owners.\n\nInstrument control effectiveness so the GRC Lead reports risk posture from live data.\n\nDesign and run agentic workflows for evidence analysis, control testing, and audit response preparation, with a human in the loop where assurance demands it. Anything manual twice a quarter gets automated.\n\nWHAT WE’RE LOOKING FOR\n6-8+ years spanning software or automation engineering and security compliance - an engineer who learned GRC, or a GRC operator who became a builder.\n\nProduction-grade scripting (Python or similar) against APIs - code you ship and own.\n\nHands-on experience building LLM/agent workflows and daily use of AI in your own work, with grounded judgment on what to delegate to agents, what needs a human, and how to evidence both to an auditor.\n\nEnough GRC domain fluency to work inside SOC 2 / ISO 27001 control language and know what an auditor will accept as evidence.\n\nClear technical writing - your evidence and documentation will be read by auditors and customer security teams.\n\nNICE TO HAVE\nExperience with compliance platform APIs and when to build past them.\n\nOSCAL or other machine-readable control/catalog formats.\n\nInfrastructure-as-code (Terraform or similar) and CI/CD pipeline engineering.\n\nPrior work on AI product assurance: evals, red-teaming evidence, or model/agent documentation.\n\nWHAT'S IN IT FOR YOU\nGlobal collaboration: Partner with teams and clients across Europe, APAC, and North America.\n\nCompetitive package: Comprehensive salary, benefits, and tools for success.\n\nMeaningful work: Your efforts shape how thousands of lawyers use AI daily.\n\nIn-person environment: Union Square office designed for ambitious builders and company provided lunch daily.\n\nBenefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision\nMultiple medical plan options through Aetna and Kaiser Permanente\n\nHSA or Healthcare FSA (based on plan selection)\n\nDental plans via MetLife\n\nVision plans via Vision Care\n\nFamily Support\nGenerous parental leave\n\nFree access to Maven Clinic\n\nDependent Care FSA\n\nFree One Medical membership for employees and dependents\n\nAdditional Perks\nPre-tax commuter benefits\n\nLife Insurance + STD/LTD\n\n401(K) with generous company match\n\nUnlimited PTO\n\nRobust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more\n\nLegora is an Equal Opportunity Employer\nAt Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.","description_format":"text","description_chars":6001,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Document AI","Legal AI"],"lifecycle":[{"event":"open","at":"2026-09-05T08:07:09Z"}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.502,"p_room":0.44,"age_days":64,"expected_fill_days":50,"reasons":["conf:5","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-09-26T05:45:00Z"},"pay":{"stated_usd_annual":273000,"is_top_pay":true},"html_url":"https://alion.io/job/legora-grc-engineer","json_url":"https://alion.io/job/legora-grc-engineer.json","meta":{"generated_at":"2026-09-27T03:32:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3324,"day_limit":5000,"remaining_today":1676,"minute_limit":60,"resets_at":"2026-09-28T00:00:00Z"}}}