On‑Site NYC: Senior Third‑Party Risk Lead

Legora; New York (NY); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical plans (Aetna/Kaiser)

HSA / Healthcare FSA

Parental leave

Maven Clinic access

Dependent Care FSA

One Medical membership

Job summary

Legora builds AI software for legal work and needs a leader to own the third-party risk program. You will set assessment standards, lead complex reviews, and ensure findings reach a decision with accountable owners.

The role blends program leadership with hands-on assessment work. You will collaborate with Engineering, Procurement, and Legal on risk, tech changes, and contractual requirements, driving mitigations and governance across the supplier ecosystem.

Qualifications

• Experience building or substantially improving a third-party or technology risk program in a SaaS or cloud environment.
• Hands-on supplier assessment experience, including interpreting assurance reports, challenging unsupported claims, and writing clear recommendations.
• Enough technical depth to discuss data flows, permissions, integrations, and service dependencies with engineers.
• Evidence that you can get agreed mitigations completed across teams, including where you have no direct management authority.
• Experience improving assessment workflows through automation, with a clear approach to checking accuracy.

Responsibilities

• Assess suppliers in context and define depth of reviews.
• Maintain view of critical providers and dependencies across services.
• Turn findings into action with approvals, mitigations, and owners.
• Prepare for supplier failure with contingency, recovery, and exit plans.
• Manage risk during onboarding, changes, renewals, and offboarding with follow-ups.
• Improve assessment processes using automation and traceable sources.
• Provide leadership with risk coverage and escalation of unresolved findings.

Skills

Third-Party Risk

SaaS Risk

Supplier Assessments

Automation in Risk

Job description

Legora builds AI software for legal work and needs a leader to own the third-party risk program. You will set assessment standards, lead complex reviews, and ensure findings reach a decision with accountable owners.

The role blends program leadership with hands-on assessment work. You will collaborate with Engineering, Procurement, and Legal on risk, tech changes, and contractual requirements, driving mitigations and governance across the supplier ecosystem.