Security & Legal Compliance Specialist - Remote (6060)

itD Tech

17d•Remote

About The Position

itD is seeking a Security & Legal Compliance Specialist to lead the analysis and modernization of legal security commitments, ensuring they accurately reflect real-world product security practices and support defensible, compliant customer agreements. The ideal candidate will bring deep experience in legal and audit functions within technology or cybersecurity environments and a track record of delivering clear, defensible contract language and stakeholder-aligned documentation updates. Location: Remote (U.S.-based preferred; collaboration with cross-functional teams across U.S. time zones) We provide comprehensive medical benefits, a 401k plan, paid holidays, and more. Please note that we are only considering direct W2 candidates at this time, as we are unable to offer sponsorship.

Requirements

Mid-career experience in legal, audit, or compliance roles within technology or cybersecurity environments.
Proven legal and audit expertise with the ability to interpret and assess complex contractual and compliance documentation.
Foundational knowledge of information security principles and best practices.
Experience drafting and negotiating technology product security terms.
Strong project management and stakeholder communication skills.
Ability to analyze complex legal documents and translate security controls into defensible contract language.

Nice To Haves

Security or audit certifications such as CISA, CISSP, Security+, or equivalent.

Responsibilities

Analyze existing legal security commitments and compare them against actual product security practices to identify gaps and risks.
Conduct interviews with legal, security, and product stakeholders to document current security posture and contractual commitments across products.
Develop and maintain a comprehensive matrix mapping product security controls to contract terms, legal exhibits, and public-facing statements.
Draft and propose updates to security-related contract language, including security exhibits, standard customer terms, and negotiation fallback positions.
Partner cross-functionally with legal, product, and security teams to align public website security content with verified security practices.
Translate technical security controls and practices into clear, defensible legal language suitable for customer contracts and public documentation.
Create and manage a project plan with real-time progress tracking, weekly status reports for stakeholders, monthly leadership briefings, and an end-of-project executive summary with findings and recommendations.
Attend regular internal practice community meetings.
Collaborate with your itD practice team on industry thought leadership.
Complete client case studies and learning material (blogs, media material).
Build out material to contribute to the Digital Transformation practice.
Attend internal itD networking events (in person and virtual).
Work with leadership on career fast-track opportunities.