NYC On-Site Third-Party Risk Lead

Legora; New York (NY); On-site; USD 140,000 - 220,000; Full time

Benefits offered by this job

Company lunch daily

Unlimited PTO

401(K) with generous company match

Life Insurance + STD/LTD

Job summary

Legora in New York City is seeking an experienced leader to own and evolve the third-party risk program within Security. You will set assessment standards, run complex reviews, and drive findings to accountable owners in a hands-on role.

This on-site, five-days-a-week position collaborates with Engineering, Procurement, and Legal to align risk with business needs and customer commitments. You will balance thorough due diligence with practical mitigations and timely decisions.

Qualifications

• Experience building or substantially improving a third-party or technology risk program in a SaaS or cloud environment.
• Hands-on supplier assessment experience, including interpreting assurance reports, challenging unsupported claims, and writing clear recommendations.
• Enough technical depth to discuss data flows, permissions, integrations, and service dependencies with engineers.
• Evidence that you can get agreed mitigations completed across teams, including where you have no direct management authority.
• Experience improving assessment workflows through automation, with a clear approach to checking accuracy.
• Sound judgment when evidence is incomplete. You can explain the likely impact, available options, and what remains uncertain.

Responsibilities

• Assess suppliers in context. Understand the service being purchased, the information it will handle, the access it needs, and the consequences of failure. Set the depth of each review accordingly.
• Understand our critical dependencies. Maintain a view of critical providers, their key subcontractors, and dependencies shared across services.
• Turn findings into action. Recommend approval conditions and mitigations, including changes to access or data sharing, with owners and deadlines.
• Prepare for supplier failure. Work on contingency, recovery, and exit plans for critical providers.
• Manage risk throughout the relationship. Define onboarding reviews, renewals, offboarding, and reassessment timing.
• Improve assessments with automation and AI, ensuring traceable sources and checks.
• Provide leadership with risk views: coverage, unresolved findings, overdue actions, contingency readiness.

Skills

Third-party risk leadership

Supplier assessment

Data flows & integrations

Automation in assessments

Cross-team mitigation

AI-provider risk

Job description

Legora in New York City is seeking an experienced leader to own and evolve the third-party risk program within Security. You will set assessment standards, run complex reviews, and drive findings to accountable owners in a hands-on role.

This on-site, five-days-a-week position collaborates with Engineering, Procurement, and Legal to align risk with business needs and customer commitments. You will balance thorough due diligence with practical mitigations and timely decisions.