Third-Party Risk Lead — AI SaaS Security & Governance

Legora AB; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Union Square office lunch daily

401(K) with company match

Unlimited PTO

Pre‑tax commuter benefits

Free One Medical membership

Job summary

Legora builds AI software for legal work and operates globally across Europe, North America and APAC. We are seeking a Senior role to own our third‑party risk program within Security.

You will set assessment standards, lead complex reviews, and ensure findings translate into accountable actions with owners and deadlines. You will collaborate with Engineering, Procurement, and Legal on risk, data flows, vendor dependencies, and contingency planning.

Qualifications

• Experience building or substantially improving a third‑party or technology risk program in a SaaS or cloud environment.
• Hands‑on supplier assessment experience, including interpreting assurance reports, challenging unsupported claims, and writing clear recommendations.
• Enough technical depth to discuss data flows, permissions, integrations, and service dependencies with engineers.
• Evidence that you can get agreed mitigations completed across teams, including where you have no direct management authority.
• Experience improving assessment workflows through automation, with a clear approach to checking accuracy.
• Sound judgment when evidence is incomplete and you can explain likely impact and options.

Responsibilities

• Assess suppliers in context: understand service, data, access, consequences of failure; tailor review depth.
• Maintain a view of critical providers and shared dependencies across services.
• Turn findings into action: recommend approvals, mitigations, assign owners and deadlines, track progress.
• Prepare for supplier failure with contingency, recovery, and exit plans; identify gaps.
• Manage risk during onboarding, material changes, renewals, offboarding; coordinate follow‑ups.
• Improve assessment processes with automation and traceable sources.
• Provide leadership with a clear view of risk, actions overdue, and contingency readiness.

Skills

Third‑party risk program

Supplier assessment

Technical depth

Mitigations ownership

Automation in assessments

Judgment under uncertainty

Job description

Legora builds AI software for legal work and operates globally across Europe, North America and APAC. We are seeking a Senior role to own our third‑party risk program within Security.

You will set assessment standards, lead complex reviews, and ensure findings translate into accountable actions with owners and deadlines. You will collaborate with Engineering, Procurement, and Legal on risk, data flows, vendor dependencies, and contingency planning.