Senior Manager – GRC
Posted 2hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
GRC leader overseeing risk, compliance, audits, and assurance for Legora’s AI-powered legal workspace. Leading global programs that protect sensitive information for legal customers.
Responsibilities:
- Lead the GRC function, set priorities, develop the team, and establish clear program ownership
- Build an operating cadence that keeps work moving and makes gaps, dependencies, and decisions visible
- Own the assurance roadmap and lead SOC 2, ISO 27001, and ISO/IEC 42001 certification and audit programs
- Maintain common controls and evidence supporting new products, markets, and customer requirements
- Lead enterprise risk assessments and reporting
- Provide leadership recommendations on impact, treatment options, and tradeoffs
- Partner with accountable owners to complete agreed risk actions
- Translate AI governance, regulatory, and policy requirements into operational controls
- Lead complex conversations with auditors and customer security teams
- Provide Customer Trust with accurate evidence and a consistent security and compliance posture
- Work with Security, Engineering, and business owners on resilience and recovery readiness
- Bring third-party risk findings into the broader GRC program
- Partner with GRC engineering on automated evidence collection, control monitoring, and repeatable workflows
- Use AI to improve GRC quality and speed with appropriate review and traceable evidence
- Work closely with the CIO and leaders across Security, Engineering, Legal, and the business
Requirements:
- Senior Manager: 8+ years in GRC, security risk, compliance or assurance
- Director: 12+ years in GRC, security risk, compliance or assurance
- Senior Manager experience leading programs and teams in fast-growing companies
- Director experience leading a global or multinational GRC function
- Experience leading GRC programs in global or multinational B2B businesses handling highly sensitive information or supporting critical customer operations
- Experience leading and developing teams while remaining close to the work
- Ownership of complex audit and certification programs, including controls, evidence, and remediation
- Sound technical and commercial judgment
- Experience working across countries and functions
- Clear, precise communication
- Practical experience using automation and AI to improve GRC work
- Familiarity with FedRAMP or other public-sector assurance programs
- Experience with AI governance frameworks and assurance for AI products
- Experience serving law firms, financial institutions, or customers with demanding security and confidentiality requirements
- Reliable overlap with European working hours
- Current authorization to work in the United States; visa/work permit sponsorship may not be available
Benefits:
- Comprehensive salary, benefits, and tools for success
- Multiple medical plan options through Aetna and Kaiser Permanente
- HSA or Healthcare FSA (based on plan selection)
- Dental plans via MetLife
- Vision plans via Vision Care
- Generous parental leave
- Free access to Maven Clinic
- Dependent Care FSA
- Free One Medical membership for employees and dependents
- Pre-tax commuter benefits
- Life Insurance + STD/LTD
- 401(K) with generous company match
- Unlimited PTO
- Voluntary benefits, including identity protection, legal coverage, pet savings programs, and more
- Meaningful work shaping how thousands of lawyers use AI daily
- Global collaboration across Europe, APAC, and North America


















