Top Cybersecurity Jobs

Own security due diligence and Day-1 posture for acquisitions, lead time-boxed integrations onto Legora's security baseline, maintain security of acquired estates until integration or decommissioning, manage compliance scope (SOC 2/ISO) and report risks to executives while partnering with cross-functional deal teams.

Own and run Legora's supply chain risk program end-to-end: maintain a living dependency map, tier critical dependencies, assess resiliency and exposure, enforce subprocessor governance, orchestrate AI agents for evidence and drift detection, automate repeatable work, quantify risk in loss-event terms, coordinate supplier incidents and off-boarding, and report metrics that show measurable risk reduction.

Manage end-to-end customer trust requests including security questionnaires, AI-trust sections, and audit evidence. Maintain the trust portal and evidence repository, coordinate with InfoSec, Privacy, and Legal, review security contractual terms, build reusable responses and automation, support customer audits, and help scale trust processes globally.

Own and harden Legora's corporate security posture across identities, non-human and human accounts, SaaS, endpoints, and AI use. Build guardrails-as-code (Python/Terraform), enforce least-privilege and phishing-resistant MFA, govern LLM/agent usage, run DLP and access reviews, and automate remediation for risky OAuth grants and device risk.

Lead Legora's assurance and AI governance programs, owning SOC 2/ISO certifications, AI-agent assurance, enterprise risk register, policy lifecycle, and BCDR. Build unified controls mapped to multiple frameworks, work with auditors and customer security teams, and convert policies into automated checks alongside the AI GRC Engineer.

Build and operate an automated GRC platform: pipelines that collect evidence across cloud, IdP, HRIS, source control and CI/CD; implement a unified controls library; produce audit-ready evidence for AI certifications; translate policies into enforceable CI/CD checks and continuous monitoring; instrument control effectiveness; design agentic workflows for evidence analysis and audit response with human-in-the-loop.