GRC
US$151,000 – US$273,000 / yr base salary
Posted 23 Jul 2026
Advertised as “GRC Lead”
BranchFactor Summary
The original posting with the fluff stripped out
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
| Base salary | US$151,000 – US$273,000 / yr |
|---|
CertificationsISO 27001 Lead Auditor, CISA, CISSP
About Us
Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.
-
We lean in: ownership over titles, outcomes over intentions.
-
We fight for excellence: high standards, direct, ego-free feedback.
-
We grow together: as a team and with our customers.
Mission before ego. Everyone contributes. No one coasts.
If you’re driven by impact, pace, and raising the bar. This is the place.
ABOUT THE ROLE
You will own Legora’s assurance program end to end: certifications, AI governance, and the risk decisions leadership acts on. It’s a senior IC seat in the Security organization. You make the judgment calls, and you’re the one in the room with auditors, regulators, and customer security teams. Your peer, the AI GRC Engineer, builds the platform underneath — the evidence pipelines and agents that carry the repetitive work.
Build controls that outlast any single framework. When a new obligation lands (an EU AI Act deadline, a state AI law, the next agent-assurance standard), it should map onto controls you already run and can evidence. Measure the program in loss-event terms, the same language our supply-chain-risk program uses, so leadership can weigh security against any other investment.
WHAT YOU’LL DO
Certification & assurance portfolio
-
Own our SOC 2 Type II, ISO 27001, and ISO/IEC 42001 certifications: recertification cycles, auditor relationships, and remediation, run off continuously collected evidence — and expand the audit boundary as new products, entities, and acquisitions come into scope.