GRC Engineer
New York City • FullTime
Posted 1mo ago
About the job
Legora is seeking an engineer to build the platform for its assurance program. This role involves creating pipelines for continuous evidence collection, checks to enforce policy in CI/CD, and agents to test controls and draft audit responses. You will work closely with the GRC Lead, Engineering, and Corporate Security teams, focusing on engineering within a compliance domain. This position is crucial because Legora sells AI agents to law firms, and demonstrating system behavior is a key part of the product offering.
Responsibilities
- Build pipelines and integrations to aggregate control, asset, and identity data across the tech stack.
- Implement a unified controls library to map single controls across multiple frameworks.
- Ingest data from existing systems owned by partners rather than building parallel collectors.
- Build the technical evidence base for AI certifications, including agent action logging and evaluation evidence.
- Translate policies and regulatory requirements into enforceable rules for automated checks and monitoring.
- Instrument control effectiveness to enable reporting on risk posture from live data.
- Design and run agentic workflows for evidence analysis, control testing, and audit response preparation.
Requirements
- 6-8+ years of experience in software or automation engineering and security compliance.
- Production-grade scripting experience (Python or similar) against APIs.
- Hands-on experience building LLM/agent workflows and daily use of AI.
- Understanding of what tasks can be delegated to agents versus what requires human oversight.
- Sufficient GRC domain fluency to work with SOC 2 / ISO 27001 control language.
- Clear technical writing skills for auditors and customer security teams.
Benefits
- Comprehensive salary and benefits package
- Medical, Dental & Vision insurance
- Multiple medical plan options
- HSA or Healthcare FSA
- Dental plans via MetLife
- Vision plans via Vision Care
- Generous parental leave
- Free access to Maven Clinic
- Dependent Care FSA
- Free One Medical membership
- Pre-tax commuter benefits
- Life Insurance + STD/LTD
- 401(K) with generous company match
- Unlimited PTO
- Robust voluntary benefits
- Company provided lunch daily