SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Legora is an AI-native legal workspace company serving 1,000+ customers across 50+ countries, including major law firms like Cleary Gottlieb, Goodwin, and Linklaters. The company has scaled to $100M+ ARR and operates teams across Europe, North America, and APAC.
You will own IT General Controls (ITGC) and technology risk across Legora's audit program. This is a hands-on, build-from-scratch role where you'll assess risk across core systems and vendors, design and execute testing where formal processes don't yet exist, and serve as a key point of coordination with external audit and the co-source partner on all IT-related matters.
Key responsibilities include:
- Contributing to IT risk assessment and translating it into a prioritized testing plan across access, change management, and operations
- Designing new ITGC testing processes, workpaper templates, and documentation frameworks from scratch
- Coordinating with external audit and co-source partners on timelines, deliverables, and open items for IT controls
- Leading walkthroughs with system owners and IT stakeholders across key applications and infrastructure
- Testing access provisioning/deprovisioning, change management, and system operations controls
- Assessing SOC 1/SOC 2 reports for key vendors and evaluating complementary user entity controls (CUECs)
- Assessing control deficiencies for severity and root cause, and driving remediation plans with system and process owners
- Implementing AI-driven and automated solutions to reduce manual testing effort and improve testing coverage
You'll work closely with the CIO organization, Engineering, Security, Finance, external audit, and co-source partners to build a rigorous, efficient ITGC program from the ground up. The role offers global collaboration across Europe, APAC, and North America, with an in-person environment at the Union Square office in New York City.
REQUIREMENTS:
- 3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function
- Big 4 or co-source firm experience in IT audit
- Demonstrated experience building or significantly enhancing an ITGC testing program or methodology from scratch
- Strong understanding of access management, change management, and system operations control concepts
- Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk
- Strong track record managing external audit and/or co-source relationships
- Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (ChatGPT, Claude, Gemini), Salesforce, and Workday
- Strong written and verbal communication skills, with ability to explain technical control concepts to non-technical stakeholders
- High degree of ownership and comfort building process where none exists
NICE TO HAVE:
- CISA, CISSP, CIA, or similar certification
- Prior experience applying AI or automation tools directly within IT audit or testing workflow
- Experience auditing cloud infrastructure and SaaS environments (GitHub, Azure, AWS, GCP, Okta, Google Workspace)
- Experience with data analytics or continuous monitoring tools (SQL, Power BI, Tableau, ACL)
- Background in SOX-compliant or public-company-readiness environment
