Legora

Senior IT Auditor

New York City. Posted a month ago

The role

The Senior IT Auditor will own IT General Controls and technology risk across the audit program. This person will design and execute testing, assess risk across core systems and vendors, and coordinate with external audit and co-source partners.

What you will do

  • Build an ITGC program from the ground up
  • Contribute IT risk assessment and translate it into a prioritized testing plan
  • Design new ITGC testing processes, workpaper templates, and documentation frameworks
  • Coordinate with external audit and the co-source partner on timelines and deliverables
  • Lead walkthroughs with system owners and IT stakeholders
  • Test access provisioning, change management, and system operations controls
  • Assess SOC 1/SOC 2 reports for key vendors and subservice organizations
  • Assess control deficiencies for severity and root cause and drive remediation
  • Implement AI-driven and automated solutions to reduce manual testing effort

Required qualifications

  • 3+ years of experience in IT audit, ITGC testing, or a related IT risk/compliance function
  • Big 4 or co-source firm experience in IT audit
  • Demonstrated experience building or significantly enhancing an ITGC testing program or methodology from scratch
  • Strong understanding of access management, change management, and system operations control concepts
  • Experience reviewing SOC 1/SOC 2 reports and assessing vendor/subservice organization risk
  • Strong track record managing external audit and/or co-source relationships
  • Proficiency with Auditboard, Vanta, NetSuite, Google Docs/Workspace, major LLM providers (e.g., ChatGPT, Claude, Gemini), Salesforce, and Workday
  • Strong written and verbal communication skills
  • A high degree of ownership and comfort building process where none exists

Nice to have

  • Helped build or scale an ITGC program through a period of rapid growth
  • CISA, CISSP, CIA, or similar certification
  • Prior experience applying AI or automation tools directly within an IT audit or testing workflow
  • Experience auditing cloud infrastructure and SaaS environments (e.g., Github, Azure, AWS, GCP, Okta, Google Workspace)
  • Experience with data analytics or continuous monitoring tools (e.g., SQL, Power BI, Tableau, ACL)
  • Background in a SOX-compliant or public-company-readiness environment

Benefits

  • Comprehensive salary, benefits, and tools for success
  • Company provided lunch daily
  • Medical, Dental & Vision
  • Multiple medical plan options through Aetna and Kaiser Permanente
  • HSA or Healthcare FSA
  • Dental plans via MetLife
  • Vision plans via Vision Care
  • Generous parental leave
  • Free access to Maven Clinic
  • Dependent Care FSA
  • Free One Medical membership for employees and dependents
  • Pre-tax commuter benefits

About the company

Legora is an AI-native workspace for legal professionals. The company has 2,100+ customers across 80+ countries and has scaled to $200M+ in ARR.