Senior It Auditor
legora
Job Score
90 ptsAbout Us
Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.
We lean in: ownership over titles, outcomes over intentions.
We fight for excellence: high standards, direct, ego-free feedback.
We grow together: as a team and with our customers.
Mission before ego. Everyone contributes. No one coasts.
If you’re driven by impact, pace, and raising the bar. This is the place.
The Role
We're hiring a Senior IT Auditor to own IT General Controls (ITGC) and technology risk across our audit program. You'll assess risk across our core systems and vendors, design and execute testing where formal processes don't yet exist, and be a key point of coordination with external audit and our co-source partner on all IT-related matters.
This is a hands-on, build-from-scratch role for someone who wants real ownership over how technology risk is assessed and controlled as the company scales — and who's excited to apply AI and automation to make testing faster and more effective, not just more of the same
What You’ll Do
You'll work closely with the CIO org, Engineering, Security, Finance, external audit, and our co-source partner to build a rigorous, efficient ITGC program from the ground up.
More than that, we believe you will thrive by taking ownership of:
Contributing the IT risk assessment and translating it into a prioritized testing plan across access, change management, and operations
Designing new ITGC testing processes, workpaper templates, and documentation frameworks from scratch
Coordinating with external audit and the co-source partner on timelines, deliverables, and open items for IT controls
Leading walkthroughs with system owners and IT stakeholders across key applications and infrastructure
Testing access provisioning/deprovisioning, change management, and system operations controls across in-scope systems
Assessing SOC 1/SOC 2 reports for key vendors and subservice organizations, and evaluating complementary user entity controls (CUECs)
Assessing control deficiencies for severity and root cause, and driving remediation plans to completion with system and process owners
Implementing AI-driven and automated solutions to reduce manual testing effort and improve testing coverage
What You Bring
You're a controls-minded IT audit professional who pairs technical fluency with strong judgment. You're comfortable operating in ambiguity, enjoy owning a program end-to-end, and know how to translate technology risk into a practical testing plan.
3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function
Big 4 or co-source firm experience in IT audit
Demonstrated experience building or significantly enhancing an ITGC testing program or methodology from scratch
Strong understanding of access management, change management, and system operations control concepts
Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk
Strong track record managing external audit and/or co-source relationships
Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (e.g., ChatGPT, Claude, Gemini), Salesforce, and Workday
Strong written and verbal communication skills, with the ability to explain technical control concepts to non-technical stakeholders
A high degree of ownership and comfort building process where none exists
Nice to Have
While not required, we think this role could be an especially strong fit if you've helped build or scale an ITGC program through a period of rapid growth.
We'd be excited if you bring:
CISA, CISSP, CIA, or similar certification
Prior experience applying AI or automation tools directly within an IT audit or testing workflow
Experience auditing cloud infrastructure and SaaS environments (e.g., Github, Azure, AWS, GCP, Okta, Google Workspace)
Experience with data analytics or continuous monitoring tools (e.g., SQL, Power BI, Tableau, ACL)
Background in a SOX-compliant or public-company-readiness environment
What’s In It For You
Global collaboration: Partner with teams and clients across Europe, APAC, and North America.
Competitive package: Comprehensive salary, benefits, and tools for success.
Meaningful work: Your efforts shape how thousands of lawyers use AI daily.
In-person environment: Union Square office designed for ambitious builders and company provided lunch daily.
Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package:
Medical, Dental & VisionMultiple medical plan options through Aetna and Kaiser Permanente
HSA or Healthcare FSA (based on plan selection)
Dental plans via MetLife
Vision plans via Vision Care
Family Support
Generous parental leave
Free access to Maven Clinic
Dependent Care FSA
Free One Medical membership for employees and dependents
Additional Perks
Pre-tax commuter benefits
Life Insurance + STD/LTD
401(K) with generous company match
Unlimited PTO
Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more
Legora is an Equal Opportunity Employer
At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.
About Finance
The Finance area in technology companies combines traditional financial knowledge with advanced digital tools. FP&A, controlling, and corporate finance professionals are essential for the organization's financial health.
Key skills include financial modeling, metrics analysis (MRR, ARR, LTV, CAC), ERP (SAP, Oracle), and BI tools. Certifications like CFA and CPA-20 are differentiators.
The financial sector offers stable opportunities with competitive salaries, especially in fintechs and large technology companies.
About IT Governance
IT Governance is the area responsible for ensuring that information technology resources are used strategically, efficiently, and in compliance with standards and regulations. IT governance professionals ensure that technology supports business objectives in a secure and reliable manner.
Key skills include IT service management (ITIL), IT audit and compliance, risk management, business continuity, disaster recovery, metrics and indicators (SLAs, KPIs), and strategic alignment between IT and business. Frameworks like COBIT, ITIL, ISO 27001, and compliance standards are essential.
IT Governance professionals in technology companies are highly valued, especially those who master ITSM, IT audit, and risk management. The field offers opportunities from governance analyst to CIO/CTO, with a focus on efficiency, compliance, security, and business value.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Web Master
The Web Master is the professional responsible for maintaining, securing, and ensuring the technical performance of websites and web applications. They manage servers, hosting infrastructure, uptime monitoring, and ensure everything runs fast and reliably.
Key skills include server management (Apache, Nginx), hosting (AWS, Google Cloud, Azure), CDN (Cloudflare), SSL, DNS, web security (WAF, firewall), performance (Core Web Vitals, cache, compression), and versioning (Git, CI/CD). Knowledge of Docker, WordPress, cPanel, and monitoring (Sentry, New Relic) is a differentiator.
Web Masters in technology companies are highly valued, especially those who master DevOps, SRE, and can guarantee uptime and performance at scale. The field offers opportunities from junior webmaster to SRE and infrastructure engineer, with a focus on reliability, security, and speed.
About Social Media
The Social Media area is one of the most dynamic and constantly evolving fields in digital marketing. Social media professionals are responsible for creating, managing, and optimizing brand presence on digital platforms, building engagement and community with the target audience.
Key skills include social media management (Instagram, TikTok, LinkedIn, Facebook, YouTube), social media content creation, community management, paid social media (Meta Ads, LinkedIn Ads, TikTok Ads), metrics analysis, and strategic planning. Tools like Hootsuite, Sprout Social, Buffer, Later, and analytics platforms are essential.
Social media professionals in technology companies are highly valued, especially those who master paid social, social media analytics, and content strategies for different platforms. The field offers opportunities from analyst to head of social media, with a focus on growth, engagement, and return on investment.
About UI Design
The User Interface (UI) Design area focuses on creating and designing all the visual elements that users interact with in a digital product. This includes screens, buttons, icons, typography, color palettes, and responsive layouts, ensuring an aesthetically pleasing, consistent, and easy-to-use interface. Skills in tools like Figma and knowledge of design systems are essential.
About Technical Support
Technical Support is essential to ensure customer satisfaction and retention. Support professionals resolve technical issues, document solutions, and identify patterns that can lead to product improvements.
Key skills include troubleshooting, customer service, technical documentation, ITIL knowledge, and ticketing tools (Zendesk, Freshdesk, Intercom).
Technical support has evolved from a reactive to a proactive function, with high-level professionals working in Customer Engineering and Support Engineering.
About Traffic Analyst
The Traffic Analyst (paid media/performance specialist) is the professional responsible for creating, managing, and optimizing sponsored ad campaigns on digital platforms such as Google Ads, Meta Ads, LinkedIn Ads, and TikTok Ads. They monitor conversion metrics, analyze return on investment (ROAS), perform A/B testing on ads and landing pages, and manage the marketing budget to maximize lead generation and qualified sales.
Comments 0