Third-Party Risk Lead
About The Position
Legora is hiring a Third-Party Risk Lead to lead its third-party risk program within Security. The role will assess the risks created by cloud platforms, AI model providers, software vendors, and other service partners, helping the company understand dependencies that could disrupt services or put information at risk. It combines program leadership with hands-on supplier assessment work. The position owns the risk assessment and oversight process. Business owners remain responsible for their supplier relationships and authorized risk acceptance. The role works with Engineering on technical changes and with Procurement and Legal on commercial and contractual requirements. It will set assessment standards, lead complex reviews, and ensure significant findings reach a decision and an accountable owner. Legora is an AI software company serving legal professionals, with more than 2,100 customers across 80+ countries and teams across Europe, North America, and APAC. The role is based in an in-person Union Square office, with collaboration across regions.
Requirements
- Experience building or substantially improving a third-party or technology risk program in a SaaS or cloud environment.
- Hands-on supplier assessment experience, including interpreting assurance reports, challenging unsupported claims, and writing clear recommendations.
- Technical depth sufficient to discuss data flows, permissions, integrations, and service dependencies with engineers.
- Evidence of getting agreed mitigations completed across teams, including without direct management authority.
- Experience improving assessment workflows through automation, with a clear approach to checking accuracy.
- Sound judgment when evidence is incomplete, including the ability to explain likely impact, available options, and remaining uncertainty.
Nice To Haves
- Experience with AI-provider assessments, subprocessor governance, supplier resilience, or quantified risk analysis.
Responsibilities
- Assess suppliers based on the services being purchased, the information they handle, their access requirements, and the consequences of failure; set review depth accordingly and investigate evidence gaps with technical teams.
- Maintain a view of critical providers, key subcontractors, and dependencies shared across services; identify heavy reliance on individual providers and challenges to replacing them.
- Translate assessment findings into approval conditions and practical mitigations, agree owners and deadlines, track completion, and escalate unresolved risks for authorized decisions.
- Work with Engineering and service owners on contingency, recovery, and exit plans for critical providers; check whether plans have been tested and highlight remaining gaps.
- Integrate reviews into supplier onboarding, material service changes, renewals, and offboarding; define reassessment triggers and coordinate follow-up after supplier incidents.
- Maintain accurate subprocessor information and work with Legal on customer notification commitments.
- Set review standards, assess quality, and improve assessment processes using automation and AI where appropriate, with traceable sources and checks on output accuracy.
- Report assessment coverage, unresolved material findings, overdue actions, and critical suppliers’ contingency-plan readiness to leadership; explain decisions needed and consequences of delay.
Benefits
- Medical insurance with multiple plan options through Aetna and Kaiser Permanente
- Dental insurance through MetLife
- Vision insurance through Vision Care
- HSA or Healthcare FSA, depending on plan selection
- Generous parental leave
- Free access to Maven Clinic
- Dependent Care FSA
- Free One Medical membership for employees and dependents
- Pre-tax commuter benefits
- Life insurance and short- and long-term disability coverage
- 401(k) with company match
- Unlimited PTO
- Voluntary benefits, including identity protection, legal coverage, and pet savings programs
- Company-provided lunch daily
- Competitive salary and benefits package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
