Senior Manager – GRC

Posted 2hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

GRC leader overseeing risk, compliance, audits, and assurance for Legora’s AI-powered legal workspace. Leading global programs that protect sensitive information for legal customers.

Responsibilities:

  • Lead the GRC function, set priorities, develop the team, and establish clear program ownership
  • Build an operating cadence that keeps work moving and makes gaps, dependencies, and decisions visible
  • Own the assurance roadmap and lead SOC 2, ISO 27001, and ISO/IEC 42001 certification and audit programs
  • Maintain common controls and evidence supporting new products, markets, and customer requirements
  • Lead enterprise risk assessments and reporting
  • Provide leadership recommendations on impact, treatment options, and tradeoffs
  • Partner with accountable owners to complete agreed risk actions
  • Translate AI governance, regulatory, and policy requirements into operational controls
  • Lead complex conversations with auditors and customer security teams
  • Provide Customer Trust with accurate evidence and a consistent security and compliance posture
  • Work with Security, Engineering, and business owners on resilience and recovery readiness
  • Bring third-party risk findings into the broader GRC program
  • Partner with GRC engineering on automated evidence collection, control monitoring, and repeatable workflows
  • Use AI to improve GRC quality and speed with appropriate review and traceable evidence
  • Work closely with the CIO and leaders across Security, Engineering, Legal, and the business

Requirements:

  • Senior Manager: 8+ years in GRC, security risk, compliance or assurance
  • Director: 12+ years in GRC, security risk, compliance or assurance
  • Senior Manager experience leading programs and teams in fast-growing companies
  • Director experience leading a global or multinational GRC function
  • Experience leading GRC programs in global or multinational B2B businesses handling highly sensitive information or supporting critical customer operations
  • Experience leading and developing teams while remaining close to the work
  • Ownership of complex audit and certification programs, including controls, evidence, and remediation
  • Sound technical and commercial judgment
  • Experience working across countries and functions
  • Clear, precise communication
  • Practical experience using automation and AI to improve GRC work
  • Familiarity with FedRAMP or other public-sector assurance programs
  • Experience with AI governance frameworks and assurance for AI products
  • Experience serving law firms, financial institutions, or customers with demanding security and confidentiality requirements
  • Reliable overlap with European working hours
  • Current authorization to work in the United States; visa/work permit sponsorship may not be available

Benefits:

  • Comprehensive salary, benefits, and tools for success
  • Multiple medical plan options through Aetna and Kaiser Permanente
  • HSA or Healthcare FSA (based on plan selection)
  • Dental plans via MetLife
  • Vision plans via Vision Care
  • Generous parental leave
  • Free access to Maven Clinic
  • Dependent Care FSA
  • Free One Medical membership for employees and dependents
  • Pre-tax commuter benefits
  • Life Insurance + STD/LTD
  • 401(K) with generous company match
  • Unlimited PTO
  • Voluntary benefits, including identity protection, legal coverage, pet savings programs, and more
  • Meaningful work shaping how thousands of lawyers use AI daily
  • Global collaboration across Europe, APAC, and North America