Senior IT Auditor

Legora; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401(K) with company match

Unlimited PTO

In-person office with lunch daily

Job summary

Legora is hiring a Senior IT Auditor to own IT General Controls (ITGC) and technology risk across our audit program. You will assess risk across core systems and vendors, design and execute testing where processes are not yet defined, and coordinate with external audit and our co-source partner on IT matters.

This hands-on role offers ownership over how technology risk is assessed and controlled as the company scales, with opportunities to apply AI and automation to testing for speed and

Qualifications

• 3+ years IT audit experience in ITGC testing or related IT risk/compliance
• Big 4 or co-source IT audit experience
• Proven track record building ITGC testing programs from scratch
• Strong understanding of access management, change management, and system operations controls
• Experience reviewing SOC 1/SOC 2 reports and vendor risk
• Strong external-audit and/ or co-source relationship management
• Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, LLMs (ChatGPT/Claude/Gemini), Salesforce and Workday

Responsibilities

• Build a rigorous ITGC program from the ground up with CIO/Engineering/Finance teams
• Translate IT risk into a prioritized testing plan across access, change management and operations
• Design testing processes, templates and documentation frameworks
• Coordinate with external audit and co-source partner on timelines and deliverables
• Lead walkthroughs with system owners and IT stakeholders
• Test access provisioning, change management and operations controls across in-scope systems
• Assess SOC reports and vendor risk, drive remediation with owners
• Implement AI-driven and automated testing to improve coverage

Skills

IT audit

ITGC testing

SOC reports

External audit

Vendor risk

LLMs

Cloud security

Communication

Tools

Auditboard

Vanta

NetSuite

Google Docs/Workspace

ChatGPT

Claude

Gemini

Salesforce

Workday

Job description

About Us

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.

• We lean in: ownership over titles, outcomes over intentions.

• We fight for excellence: high standards, direct, ego-free feedback.

• We grow together: as a team and with our customers.

Mission before ego. Everyone contributes. No one coasts.

If you're driven by impact, pace, and raising the bar. This is the place.

The Role

We're hiring a Senior IT Auditor to own IT General Controls (ITGC) and technology risk across our audit program. You'll assess risk across our core systems and vendors, design and execute testing where formal processes don't yet exist, and be a key point of coordination with external audit and our co-source partner on all IT-related matters.

This is a hands-on, build-from-scratch role for someone who wants real ownership over how technology risk is assessed and controlled as the company scales — and who's excited to apply AI and automation to make testing faster and more effective, not just more of the same

What You'll Do

You'll work closely with the CIO org, Engineering, Security, Finance, external audit, and our co-source partner to build a rigorous, efficient ITGC program from the ground up.

More than that, we believe you will thrive by taking ownership of:

• Contributing the IT risk assessment and translating it into a prioritized testing plan across access, change management, and operations

• Designing new ITGC testing processes, workpaper templates, and documentation frameworks from scratch

• Coordinating with external audit and the co-source partner on timelines, deliverables, and open items for IT controls

• Leading walkthroughs with system owners and IT stakeholders across key applications and infrastructure

• Testing access provisioning/deprovisioning, change management, and system operations controls across in-scope systems

• Assessing SOC 1/SOC 2 reports for key vendors and subservice organizations, and evaluating complementary user entity controls (CUECs)

• Assessing control deficiencies for severity and root cause, and driving remediation plans to completion with system and process owners

• Implementing AI-driven and automated solutions to reduce manual testing effort and improve testing coverage

What You Bring

You're a controls-minded IT audit professional who pairs technical fluency with strong judgment. You're comfortable operating in ambiguity, enjoy owning a program end-to-end, and know how to translate technology risk into a practical testing plan.

• 3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function

• Big 4 or co-source firm experience in IT audit

• Demonstrated experience building or significantly enhancing an ITGC testing program or methodology from scratch

• Strong understanding of access management, change management, and system operations control concepts

• Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk

• Strong track record managing external audit and/or co-source relationships

• Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (e.g., ChatGPT, Claude, Gemini), Salesforce, and Workday

• Strong written and verbal communication skills, with the ability to explain technical control concepts to non-technical stakeholders

• A high degree of ownership and comfort building process where none exists

Nice to Have

While not required, we think this role could be an especially strong fit if you've helped build or scale an ITGC program through a period of rapid growth.

We'd be excited if you bring:

• CISA, CISSP, CIA, or similar certification

• Prior experience applying AI or automation tools directly within an IT audit or testing workflow

• Experience auditing cloud infrastructure and SaaS environments (e.g., Github, Azure, AWS, GCP, Okta, Google Workspace)

• Experience with data analytics or continuous monitoring tools (e.g., SQL, Power BI, Tableau, ACL)

• Background in a SOX-compliant or public-company-readiness environment

What's In It For You

• Global collaboration: Partner with teams and clients across Europe, APAC, and North America.

• Competitive package: Comprehensive salary, benefits, and tools for success.

• Meaningful work: Your efforts shape how thousands of lawyers use AI daily.

• In-person environment: Union Square office designed for ambitious builders and company provided lunch daily.

• Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package:
  Medical, Dental & Vision

  • Multiple medical plan options through Aetna and Kaiser Permanente

  • HSA or Healthcare FSA (based on plan selection)

  • Dental plans via MetLife

  • Vision plans via Vision Care

  Family Support

  • Generous parental leave

  • Free access to Maven Clinic

  • Dependent Care FSA

  • Free One Medical membership for employees and dependents

  Additional Perks

  • Pre-tax commuter benefits

  • Life Insurance + STD/LTD

  • 401(K) with generous company match

  • Unlimited PTO

  • Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more

Legora is an Equal Opportunity Employer

At Legora, we believe great teams are built on diversity of thought and experience. We're proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.