Director of Internal Audit

Legora Legora · Vertical AI · New York, NY · Corporate

The Director of Internal Audit will build and lead the internal audit function at Legora, establishing the audit program from the ground up. This role involves designing and implementing risk assessment methodologies, audit plans, policies, and reporting frameworks. The director will execute operational, financial, and compliance audits, evaluate internal controls, and support SOX and regulatory compliance. The position also requires preparing for scale and IPO readiness, partnering cross-functionally, and reporting to leadership and the Audit Committee. The ideal candidate has 8+ years of experience in internal audit or external audit, preferably with Big 4 and high-growth SaaS company experience, and holds a CPA, CIA, or CISA certification.

What you'd actually do

  1. Build the internal audit function: Design and implement Legora's internal audit program — risk assessment methodology, audit plan, policies, and reporting framework — from scratch.
  2. Lead the annual risk assessment and audit plan: Identify and prioritize audit areas based on business risk, growth stage, and strategic priorities. Present findings and recommendations to the CFO and Audit Committee.
  3. Execute operational, financial, and compliance audits: Plan and conduct audits across the business — financial controls, operational processes, IT general controls, data security, and vendor management.
  4. Own internal controls: Evaluate the design and effectiveness of internal controls. Identify gaps, drive remediation, and track progress to closure.
  5. Support SOX and regulatory compliance: Partner with Engineering, Legal, and Security to support SOX certification and ensure ongoing compliance with relevant regulatory frameworks.

Skills

Required

  • 8+ years of experience in internal audit, external audit, or a combination
  • Meaningful time at a Big 4 firm
  • Meaningful time in a high-growth technology or SaaS company
  • Deep knowledge of audit standards
  • Deep knowledge of internal control frameworks (COSO)
  • Deep knowledge of risk assessment methodologies
  • Experience building or significantly shaping an internal audit function
  • Comfortable with financial audits
  • Comfortable with operational audits
  • Working knowledge of IT general controls
  • Working knowledge of data privacy
  • Working knowledge of information security
  • Clarity in communication (writing and in person)
  • Ability to present findings to senior stakeholders and board-level audiences
  • CPA, CIA, or CISA certification (or equivalent)
  • Bachelor's degree in Accounting or Finance
  • Self-starter
  • Operates well with autonomy
  • Takes ownership

Nice to have

  • Experience with SOX compliance
  • Experience with SOC 2
  • Experience with pre-IPO readiness at a venture-backed tech company

What the JD emphasized

  • Build the internal audit function
  • Build the governance infrastructure