Customer Trust Specialist
legora
Job Score
70 ptsAbout Us
Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.
We lean in: ownership over titles, outcomes over intentions.
We fight for excellence: high standards, direct, ego-free feedback.
We grow together: as a team and with our customers.
Mission before ego. Everyone contributes. No one coasts.
If you’re driven by impact, pace, and raising the bar. This is the place.
The Role
Customer Trust is how Legora earns and keeps the confidence of the world's most demanding legal teams in how we handle their data, and how our AI handles it.
We are the front line for customer security, privacy, and compliance scrutiny: the team that answers the hard questions buyers, CISOs, and procurement teams ask. We own the security questionnaires (including their AI sections), the trust portal, the audit and evidence requests, and the customer-facing side of our SOC 2, ISO 27001, and AI-governance posture.
We partner closely with Information Security, Privacy and Legal counsel, and Go-to-Market to turn scrutiny into signed, renewed, and expanded relationships. Our work makes Legora easy to trust and easy to buy.
What You'll Be Doing
Own customer trust requests end-to-end: security questionnaires (SIG, CAIQ, and bespoke), DDQs, and the security and AI sections of RFPs, delivering high-quality responses against agreed SLAs in time-sensitive sales and renewal cycles.
Answer the AI-trust questions buyers now ask: questions on training-data handling and retention, model-provider subprocessors, data residency, and our EU AI Act, ISO/IEC 42001, and NIST AI RMF posture, coordinating with Privacy and Legal counsel on anything touching privilege or client confidentiality.
Communicate with expertise: translate Legora's security, privacy, and AI-governance posture into clear, confident answers for customer CISOs, GCs, and procurement teams.
Master the product and controls: develop deep expertise in Legora's platform, its security and compliance controls, and its AI supply chain, so you can resolve complex trust questions with sound judgment.
Run the trust portal and evidence repository: keep the portal, SOC 2 / ISO reports, penetration-test summaries, DPAs, subprocessor and model-provider lists, and AI-governance documentation current, accurate, and self-serve.
Review security and contractual terms: support DPAs, security addenda, and non-standard customer security and AI terms, partnering with Legal to land them without slowing the deal.
Build the response library and automate: maintain reusable, approved responses and drive questionnaire automation, including AI-assisted drafting, to raise quality and cut turnaround.
Drive improvements and monitor proactively: spot recurring questions, objections, and emerging requirements, and partner with Information Security, Product, and Legal to close gaps and reduce repeat work.
Support customer audits and security reviews: coordinate customer-facing security calls, audit responses, and follow-ups with precision and care.
Shape the function: as an early team member, build the processes, workflows, and standards for Customer Trust that scale globally.
Who You Are
3–5+ years in customer trust, security GRC, security assurance, third-party risk, or a closely related customer-facing security or compliance role.
You've owned complex, high-stakes B2B relationships with demanding security, procurement, and legal stakeholders, taking full ownership of issues, delivering exceptional outcomes, and turning scrutiny into trust.
You can translate technical security and AI-governance controls into clear, customer-ready answers, with the judgment to know what to answer, what to caveat, and what to escalate.
You notice patterns, anticipate objections before they escalate, and collaborate cross-functionally to drive lasting improvements.
You are customer-obsessed, organized, and detail-oriented under deadline pressure.
You are technically curious and comfortable learning new software, security concepts, and AI and compliance frameworks quickly.
Someone who enjoys being in the office 5 days a week. A key component of Legora’s success has been in-person collaboration and we want you to be part of that.
Nice To Have
Familiarity with SOC 2, ISO 27001, GDPR, and NIST, plus DPAs and subprocessor management.
Exposure to AI governance and assurance: EU AI Act, ISO/IEC 42001, NIST AI RMF, model-training and data-retention questions, and AI-subprocessor disclosure.
Certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Implementer / Lead Auditor.
Experience with trust and GRC tooling such as Vanta, Drata, SafeBase, OneTrust, Conveyor, or Loopio.
A working understanding of cloud security and data-handling fundamentals, access, encryption, and data residency.
Background in SaaS, AI, or legal tech environments.
What's In It For You
Global collaboration: Partner with teams and clients across Stockholm, New York, London, and Sydney.
Competitive package: Comprehensive salary, benefits, and tools for success.
Meaningful work: Your efforts shape how thousands of lawyers use AI daily.
In-person environment: San Francisco office designed for ambitious builders and company provided lunch daily.
Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package:
Medical, Dental & VisionMultiple medical plan options via Aetna and Kaiser Permanente
HSA or Healthcare FSA (based on plan selection)
Dental plans via MetLife
Vision plans via Vision Care
Family Support
Generous parental leave
Free access to Maven Clinic
Dependent Care FSA
Free One Medical membership for employees and dependents
Additional Perks
Pre-tax commuter benefits
Life Insurance + STD/LTD
401(K) with generous company match
Unlimited PTO
Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more
Legora is an Equal Opportunity Employer
At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Tech Recruiter
The Tech Recruiter is a professional specialized in recruiting technology talent, from developers to AI engineers and DevOps professionals. They combine technical knowledge with recruitment skills to evaluate and attract highly qualified candidates.
Key skills include technical screening, analysis of technical profiles (GitHub, portfolios, blogs), knowledge of software stacks and architectures, networking in tech communities and events. Proficiency with tools like LinkedIn Recruiter, Gem, Ashby, and technical assessment platforms is a differentiator.
Tech Recruiters are scarce and highly paid professionals, especially those who can map and access passive talent in competitive markets like AI, data engineering, and cloud computing.
About SEO Analyst
The SEO Analyst is the professional responsible for optimizing websites for search engines, increasing organic visibility and qualified traffic. With the growing importance of digital marketing, SEO professionals are fundamental to any online presence strategy.
Key skills include on-page and off-page SEO, technical SEO, keyword research, SEO audits, link building, optimized content creation, and metrics analysis. Tools like Google Search Console, Google Analytics, Ahrefs, Semrush, Moz, and Screaming Frog are essential for daily work.
SEO analysts in technology companies are highly valued, especially those who master technical SEO, Core Web Vitals, and data-driven content strategies. The field offers opportunities from junior analyst to head of SEO, with a focus on organic growth, domain authority, and return on investment.
About Backend
The Backend area is responsible for all server logic, APIs, databases, and infrastructure that support web and mobile applications. Backend professionals ensure that systems are scalable, secure, and performant.
Key skills include languages like PHP, Java, Python, Ruby, Go, and Node.js, frameworks like Laravel, Spring Boot, Django, and Express, databases (MySQL, PostgreSQL, MongoDB, Redis), software architecture (clean architecture, DDD, microservices), and API security (OAuth, JWT).
Backend developers in technology companies are highly valued, especially those who master microservices architecture, cloud computing, and high-scale performance. The field offers opportunities from junior developer to software architect, with a focus on scalability, security, and efficiency.
About Cloud Solutions
The Cloud Solutions area is responsible for designing, implementing, and managing cloud infrastructure and services (AWS, Azure, GCP) for companies. Cloud professionals architect scalable, secure, and cost-optimized solutions, from data center migrations to serverless and multi-cloud architectures.
Key skills include IaC (Terraform, CloudFormation), containers (Docker, Kubernetes), serverless (Lambda, Cloud Functions), managed databases (RDS, DynamoDB, BigQuery), cloud networking (VPC, CDN, load balancer), and security (IAM, WAF, KMS). Knowledge of FinOps, cloud governance, and AWS/Azure/GCP certifications is a differentiator.
Cloud Solutions professionals in technology companies are highly valued, especially those who master multi-cloud architectures, FinOps, and can optimize costs while maintaining performance and security. The field offers opportunities from cloud engineer to cloud solutions architect, head of cloud, and chief cloud architect.
About Traffic Manager
The Traffic Manager is the professional responsible for planning, executing, and optimizing paid media campaigns across various digital platforms. With the competitiveness of the digital market, paid traffic professionals are essential for generating qualified leads and maximizing return on advertising investment.
Key skills include campaign management on Google Ads, Meta Ads, LinkedIn Ads, and TikTok Ads, media planning, metrics analysis (ROAS, CPA, CPC, CTR), A/B testing, remarketing, and landing page creation. Tools like Google Analytics, Google Tag Manager, Hotjar, and automation platforms are essential.
Traffic managers in technology companies are highly valued, especially those who master performance marketing, conversion funnel optimization, and scaling strategies. The field offers opportunities from media analyst to head of performance, with a focus on growth, budget efficiency, and return on investment.
Comments 0