Loading...
Mid LevelFull-timeRustAzureAIML
Salary Range
$102,000 - $138,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a GRC Security Specialist to join Legora, a company redefining legal work through AI-native workspace solutions. This role involves protecting clients' sensitive legal data by building and managing security and compliance programs in the AI era.
Key Responsibilities
- →Own and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 and ISO 42001
- →Lead the company's compliance efforts for SOC 2 Type II and support future SOX ITGC readiness
- →Develop, implement, and maintain information security policies aligned with regulatory frameworks
- →Conduct regular risk assessments, threat modeling, and gap analyses
- →Coordinate internal and external audits, penetration tests, and compliance assessments
- →Manage vendor risk through security reviews and ongoing monitoring
- →Serve as a primary point of contact for client security questionnaires and contractual commitments
- →Support secure AI governance by defining policies and controls
- →Drive security awareness and training across the organization
- →Collaborate with Engineering teams on incident response planning
Requirements
- ✓7+ years of experience in GRC, information security, compliance, or audit roles
- ✓Hands-on experience implementing and managing ISO 27001 and SOC 2 Type II
- ✓Knowledge of governance frameworks, risk management methodologies, and data protection regulations
- ✓Understanding of Zero Trust principles and OWASP top 10 risks
- ✓Ability to engage with technical teams on cloud security, infrastructure-as-code, and secure development practices
- ✓Strong analytical and organizational skills
- ✓Excellent communication and stakeholder management skills
- ✓Experience with securing AI/ML workflows and building automation with GenAI tools is a plus
Free to sign up. Takes 30 seconds.
