Security Engineer (GRC)

TL;DR

Security Engineer (GRC): Build and maintain the evidence and controls platform for continuous assurance and agentic workflows in a compliance domain with an accent on automated checks, AI certification standards, and integration across cloud and CI/CD systems. Focus on designing enforceable rules, agentic workflows, and technical evidence for AI product assurance.

Location: On-site in New York City, USA

Salary: $188,000–$221,000 + Equity

Company

Legora is an AI-native legal workspace company serving 1,000+ customers globally, focused on accelerating legal workflows with AI-powered automation and compliance solutions.

What you will do

• Build pipelines and integrations to aggregate control, asset, and identity data across cloud, IdP, HRIS, source control, and CI/CD systems.
• Implement a unified controls library to satisfy multiple compliance frameworks with single evidence collection.
• Develop technical evidence bases for AI certifications including ISO/IEC 42001 and emerging AI-agent assurance standards.
• Translate policies and regulatory requirements into automated checks and continuous controls monitoring.
• Design and run agentic workflows for evidence analysis, control testing, and audit response preparation with human oversight.
• Collaborate daily with GRC Lead, Engineering, and Corporate Security teams.

Requirements

• On-site presence in New York City, USA.
• 5+ years of experience in software or automation engineering combined with security compliance.
• Proficient in production-grade scripting (Python or similar) and API integration.
• Experience building LLM/agent workflows and applying AI with sound judgment on automation and human oversight.
• Strong GRC domain knowledge including SOC 2 and ISO 27001 control frameworks.
• Clear technical writing skills for audit and customer documentation.

Nice to have

• Experience with compliance platform APIs and machine-readable control formats like OSCAL.
• Infrastructure-as-code and CI/CD pipeline engineering experience (Terraform or similar).
• Prior work on AI product assurance such as evaluations, red-teaming, or model documentation.

Culture & Benefits

• Global collaboration with teams and clients across Europe, APAC, and North America.
• Competitive salary package with equity and comprehensive benefits including medical, dental, vision, and family support.
• On-site work environment at Union Square office with company-provided lunch.
• Generous parental leave, free access to Maven Clinic, and One Medical membership.
• 401(k) with company match, unlimited PTO, and robust voluntary benefits including identity protection and legal coverage.