GRC Engineer
Core
Build the platform and agentic workflows for Legora's assurance program, turning certifications into normal operations outputs for AI agents sold to law firms.
Role type
GRC Engineer (Security & Compliance)
Builds
Automated evidence pipelines, unified controls library, agentic workflows for audit response, and technical evidence bases for AI certifications.
Domain
Legal Tech / AI Safety / Security Compliance
Deliverable
production ML models | infrastructure
Required skills
Python scripting, LLM/agent workflow design, GRC domain fluency (SOC 2/ISO 27001), technical writing, CI/CD integration
Preferred skills
OSCAL, Infrastructure-as-Code (Terraform), AI product assurance (red-teaming/evals)
Technologies
Python, CI/CD, Terraform, LLM frameworks
Responsibilities
Build pipelines aggregating control/asset/identity data; implement unified controls library; translate policies into enforceable CI/CD rules; design agentic workflows for evidence analysis; document technical evidence for auditors.
Seniority
Mid-Senior, hands-on IC
