Senior IT Auditor
New York City • FullTime
Posted 13h ago
About the job
Legora is seeking a Senior IT Auditor to lead the IT General Controls (ITGC) and technology risk assessment for their audit program. This is a hands-on role focused on building and owning the IT risk assessment process from the ground up, especially as the company scales. The ideal candidate will apply AI and automation to enhance testing efficiency and effectiveness, working closely with various internal teams, external auditors, and co-source partners. This position offers significant ownership and the opportunity to shape how technology risk is managed within an innovative legal tech company.
Responsibilities
- Contribute to IT risk assessment and develop a prioritized testing plan for access, change management, and operations.
- Design and implement new ITGC testing processes, workpaper templates, and documentation frameworks.
- Coordinate with external audit and co-source partners on IT control timelines, deliverables, and open items.
- Lead walkthroughs with system owners and IT stakeholders for key applications and infrastructure.
- Test access provisioning/deprovisioning, change management, and system operations controls.
- Assess SOC 1/SOC 2 reports for vendors and subservice organizations, evaluating complementary user entity controls.
- Evaluate control deficiencies, determine root causes, and drive remediation plans with owners.
- Implement AI-driven and automated solutions to reduce manual testing and improve coverage.
Requirements
- 3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function.
- Experience from a Big 4 or co-source firm in IT audit.
- Demonstrated experience building or significantly enhancing an ITGC testing program from scratch.
- Strong understanding of access management, change management, and system operations control concepts.
- Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk.
- Proven track record managing external audit and/or co-source relationships.
- Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (e.g., ChatGPT, Claude, Gemini), Salesforce, and Workday.
- Strong written and verbal communication skills, capable of explaining technical control concepts to non-technical stakeholders.
- High degree of ownership and comfort building processes where none exist.
Benefits
- Comprehensive salary
- Medical, Dental & Vision insurance
- Multiple medical plan options through Aetna and Kaiser Permanente
- HSA or Healthcare FSA
- Dental plans via MetLife
- Vision plans via Vision Care
- Generous parental leave
- Free access to Maven Clinic
- Dependent Care FSA
- Free One Medical membership for employees and dependents
- Pre-tax commuter benefits
- Life Insurance + STD/LTD
- 401(K) with generous company match
- Unlimited PTO
- Global collaboration opportunities
- Meaningful work shaping AI usage in legal
- In-person environment with company-provided lunch daily