Legora
GRC Engineer
$151K–$273K
New York City · On-site · Full-time · Posted Jul 23, 2026
- Experience
- 6-8+ years spanning software or automation engineering and security compliance.
About the job
Build and operate the engineering platform that automates GRC evidence collection, continuous controls monitoring, and audit workflows, including assurance for AI systems.
What you'll do
- Build integrations and pipelines that turn control, asset, and identity data into automated checks, dashboards, and audit evidence.
- Translate policies into enforceable CI/CD and infrastructure checks, monitor controls, and alert owners to drift.
- Develop agentic workflows for evidence analysis, control testing, and audit responses, with human review where needed.
What they ask for
- 6-8+ years spanning software or automation engineering and security compliance.
- Production-grade scripting (Python or similar) against APIs, with code shipped and owned.
- Hands-on experience building LLM/agent workflows and daily use of AI, with sound judgment about human oversight and audit evidence.
- GRC fluency with SOC 2 / ISO 27001 controls, auditor-acceptable evidence, and clear technical writing.
Nice to have
- Experience with compliance platform APIs; OSCAL or other machine-readable control/catalog formats.
- Infrastructure-as-code (Terraform or similar), CI/CD pipeline engineering, or AI product assurance experience.
Pay
$151K – $273K (base salary)
Tools
Python, LLM, SOC 2, ISO 27001, ISO/IEC 42001, OSCAL, Terraform, CI/CD
AI focus
Build technical evidence for AI certifications and assurance standards, including agent action logging, evaluation evidence, tool-call restrictions, and failure-mode documentation; develop agentic workflows for evidence analysis, control testing, and audit response preparation.
Model-written summary · the original posting is authoritative