Senior Manager OR Director of GRC

About Us

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.

Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.

2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to$200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler.

We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.

Joining Legora means three things.

• We lean in: ownership over titles, outcomes over intentions.
• We fight for excellence: high standards, direct, ego-free feedback.
• We grow together: as a team and with our customers.

Mission before ego. Everyone contributes. No one coasts.

If you’re driven by impact, pace, and raising the bar. This is the place.

Location: New York City or US remote within the Eastern Time zone Team: Information Security Employment: Full-time

The role

Legora builds AI software for legal work. Our customers trust us with highly sensitive information and expect us to demonstrate how we protect it. As we grow across markets, our governance, risk and compliance program needs to keep pace with the business and the scrutiny that comes with it.

We're looking for a Senior Manager or Director of GRC to lead that function. You will set the direction, develop the team and take responsibility for the quality and execution of our risk, compliance and assurance programs. You'll work closely with our CIO and leaders across Security, Engineering, Legal and the business to turn complex requirements into clear decisions and effective controls.

This role calls for someone who can lead a global program and get into the detail. You should be comfortable challenging an assessment, examining evidence, resolving a difficult audit issue and explaining a risk decision to an executive or customer. You will work closely with colleagues in Stockholm, making reliable overlap with European working hours essential.

What you'll do

• Lead the GRC function. Set priorities, develop the team and establish clear ownership across the program. Build an operating cadence that keeps work moving and makes gaps, dependencies and decisions visible.
• Own the assurance roadmap. Lead certification and audit programs across frameworks such as SOC 2, ISO 27001 and ISO/IEC 42001. Maintain a common set of controls and evidence that can support new products, markets and customer requirements.
• Make risk useful to the business. Lead enterprise risk assessments and reporting. Give leadership clear recommendations on impact, treatment options and tradeoffs, and work with accountable owners to complete agreed actions.
• Translate requirements into practice. Partner with Legal and technical teams on AI governance, regulatory obligations and policy. Make sure requirements become controls that teams can operate and demonstrate.
• Represent our program externally. Lead complex conversations with auditors and customer security teams. Give Customer Trust clear, accurate evidence and a consistent account of our security and compliance posture.
• Connect the program across teams. Work with Security, Engineering and business owners on resilience and recovery readiness. Bring third-party risk findings into the broader GRC program in partnership with the lead responsible for those assessments.
• Improve how the work gets done. Partner with GRC engineering on automated evidence collection, control monitoring and repeatable workflows. Use AI where it improves quality or speed, with appropriate review and traceable evidence.

What you bring

• Senior Manager: 8+ years in GRC, security risk, compliance or assurance, including experience leading programs and teams in fast-growing companies. You have owned major workstreams, set priorities and delivered results across functions.
• Director: 12+ years in GRC, security risk, compliance or assurance, including experience leading a global or multinational GRC function. You have set strategy, developed teams and advised senior leadership on risk and assurance priorities.

We will assess level based on the scope you have owned, your leadership and your results, alongside years of experience.

Across both levels, you bring

• Experience leading GRC programs in global or multinational B2B businesses whose products or services handle highly sensitive information or support critical customer operations.
• A record of leading and developing teams while remaining close to the work. You can set direction, hold a high quality bar and resolve problems without waiting for escalation.
• Ownership of complex audit and certification programs, including the controls, evidence and remediation needed to make them work.
• Sound technical and commercial judgment. You can work with engineers on how a control actually operates and with business leaders on the consequences of a risk decision.
• Experience working across countries and functions, balancing customer expectations, regulatory requirements and the pace of a growing business.
• Clear, precise communication. You can explain what matters, what remains uncertain and what decision is needed.
• Practical experience using automation and AI to improve GRC work, with a clear view of where human judgment remains necessary.

Helpful experience

• Familiarity with FedRAMP or other public-sector assurance programs.
• Experience with AI governance frameworks and assurance for AI products.
• Experience serving law firms, financial institutions or other customers with demanding security and confidentiality requirements.

What’s In It For You

• Global collaboration: Partner with teams and clients across Europe, APAC, and North America.
• Competitive package: Comprehensive salary, benefits, and tools for success.
• Meaningful work: Your efforts shape how thousands of lawyers use AI daily.
• Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision Multiple medical plan options through Aetna and Kaiser Permanente
• HSA or Healthcare FSA (based on plan selection)
• Dental plans via MetLife
• Vision plans via Vision Care

Family Support

• Generous parental leave
• Free access to Maven Clinic
• Dependent Care FSA
• Free One Medical membership for employees and dependents

Additional Perks

• Pre-tax commuter benefits
• Life Insurance + STD/LTD
• 401(K) with generous company match
• Unlimited PTO
• Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more

Legora is an Equal Opportunity Employer

At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.

Where you can be based

This position is 100% remote and open to applicants based in United States.