Senior Third-Party Risk Lead: SaaS & Security

Legora; Newark (NJ); On-site; USD 140,000 - 230,000; Full time

Benefits offered by this job

Lunch provided daily

Unlimited PTO

401(K) with company match

Comprehensive health plans

In-office Union Square

Job summary

Legora seeks a security professional to lead its third-party risk program within Security. You will set assessment standards, conduct complex reviews, and ensure findings reach an accountable owner. The role blends program leadership with hands-on assessment work.

You will partner with Engineering, Procurement, and Legal to manage risk across suppliers, including contingency planning and offboarding, with an emphasis on automation and evidence-based decisions.

Qualifications

• Experience building or substantially improving a third-party or technology risk program in a SaaS or cloud environment.
• Hands-on supplier assessment experience, including interpreting assurance reports, challenging unsupported claims, and writing clear recommendations.
• Enough technical depth to discuss data flows, permissions, integrations, and service dependencies with engineers.
• Evidence that you can get agreed mitigations completed across teams, including where you have no direct management authority.
• Experience improving assessment workflows through automation, with a clear approach to checking accuracy.
• Sound judgment when evidence is incomplete and ability to explain impact and options.

Responsibilities

• Assess suppliers in context: understand the service, information handled, access required, and consequences of failure.
• Understand critical dependencies and identify where replacement would be difficult.
• Turn findings into action with approvals and mitigations and track deadlines.
• Prepare for supplier failure with contingency, recovery, and exit plans.
• Manage risk throughout the relationship: onboarding, renewals, and offboarding, with reassessment triggers.
• Improve assessments with automation and traceable sources.
• Provide leadership with a view of risk, unresolved findings, and contingency readiness.

Skills

Third-party risk program

Supplier assessment

Data flows & integrations

Mitigation actions

Automation in assessments

Tools

Cloud environments

Job description

Legora seeks a security professional to lead its third-party risk program within Security. You will set assessment standards, conduct complex reviews, and ensure findings reach an accountable owner. The role blends program leadership with hands-on assessment work.

You will partner with Engineering, Procurement, and Legal to manage risk across suppliers, including contingency planning and offboarding, with an emphasis on automation and evidence-based decisions.