← Back to jobs

Customer Trust Specialist

legora

OnSite San Francisco
Uncategorized

Job Score

70 pts
On-site model (+70)

About Us

Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.

Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.

1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.

We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.

Joining Legora means three things.

  • We lean in: ownership over titles, outcomes over intentions.

  • We fight for excellence: high standards, direct, ego-free feedback.

  • We grow together: as a team and with our customers.

Mission before ego. Everyone contributes. No one coasts.

If you’re driven by impact, pace, and raising the bar. This is the place.

The Role

Customer Trust is how Legora earns and keeps the confidence of the world's most demanding legal teams in how we handle their data, and how our AI handles it.

We are the front line for customer security, privacy, and compliance scrutiny: the team that answers the hard questions buyers, CISOs, and procurement teams ask. We own the security questionnaires (including their AI sections), the trust portal, the audit and evidence requests, and the customer-facing side of our SOC 2, ISO 27001, and AI-governance posture.

We partner closely with Information Security, Privacy and Legal counsel, and Go-to-Market to turn scrutiny into signed, renewed, and expanded relationships. Our work makes Legora easy to trust and easy to buy.

 

What You'll Be Doing

  • Own customer trust requests end-to-end: security questionnaires (SIG, CAIQ, and bespoke), DDQs, and the security and AI sections of RFPs, delivering high-quality responses against agreed SLAs in time-sensitive sales and renewal cycles.

  • Answer the AI-trust questions buyers now ask: questions on training-data handling and retention, model-provider subprocessors, data residency, and our EU AI Act, ISO/IEC 42001, and NIST AI RMF posture, coordinating with Privacy and Legal counsel on anything touching privilege or client confidentiality.

  • Communicate with expertise: translate Legora's security, privacy, and AI-governance posture into clear, confident answers for customer CISOs, GCs, and procurement teams.

  • Master the product and controls: develop deep expertise in Legora's platform, its security and compliance controls, and its AI supply chain, so you can resolve complex trust questions with sound judgment.

  • Run the trust portal and evidence repository: keep the portal, SOC 2 / ISO reports, penetration-test summaries, DPAs, subprocessor and model-provider lists, and AI-governance documentation current, accurate, and self-serve.

  • Review security and contractual terms: support DPAs, security addenda, and non-standard customer security and AI terms, partnering with Legal to land them without slowing the deal.

  • Build the response library and automate: maintain reusable, approved responses and drive questionnaire automation, including AI-assisted drafting, to raise quality and cut turnaround.

  • Drive improvements and monitor proactively: spot recurring questions, objections, and emerging requirements, and partner with Information Security, Product, and Legal to close gaps and reduce repeat work.

  • Support customer audits and security reviews: coordinate customer-facing security calls, audit responses, and follow-ups with precision and care.

  • Shape the function: as an early team member, build the processes, workflows, and standards for Customer Trust that scale globally.

 

Who You Are

  • 3–5+ years in customer trust, security GRC, security assurance, third-party risk, or a closely related customer-facing security or compliance role.

  • You've owned complex, high-stakes B2B relationships with demanding security, procurement, and legal stakeholders, taking full ownership of issues, delivering exceptional outcomes, and turning scrutiny into trust.

  • You can translate technical security and AI-governance controls into clear, customer-ready answers, with the judgment to know what to answer, what to caveat, and what to escalate.

  • You notice patterns, anticipate objections before they escalate, and collaborate cross-functionally to drive lasting improvements.

  • You are customer-obsessed, organized, and detail-oriented under deadline pressure.

  • You are technically curious and comfortable learning new software, security concepts, and AI and compliance frameworks quickly.

  • Someone who enjoys being in the office 5 days a week. A key component of Legora’s success has been in-person collaboration and we want you to be part of that.

 

Nice To Have

  • Familiarity with SOC 2, ISO 27001, GDPR, and NIST, plus DPAs and subprocessor management.

  • Exposure to AI governance and assurance: EU AI Act, ISO/IEC 42001, NIST AI RMF, model-training and data-retention questions, and AI-subprocessor disclosure.

  • Certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Implementer / Lead Auditor.

  • Experience with trust and GRC tooling such as Vanta, Drata, SafeBase, OneTrust, Conveyor, or Loopio.

  • A working understanding of cloud security and data-handling fundamentals, access, encryption, and data residency.

  • Background in SaaS, AI, or legal tech environments.

 

What's In It For You

  • Global collaboration: Partner with teams and clients across Stockholm, New York, London, and Sydney.

  • Competitive package: Comprehensive salary, benefits, and tools for success.

  • Meaningful work: Your efforts shape how thousands of lawyers use AI daily.

  • In-person environment: San Francisco office designed for ambitious builders and company provided lunch daily.

  • Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package:
    Medical, Dental & Vision

    • Multiple medical plan options via Aetna and Kaiser Permanente

    • HSA or Healthcare FSA (based on plan selection)

    • Dental plans via MetLife

    • Vision plans via Vision Care

    Family Support

    • Generous parental leave

    • Free access to Maven Clinic

    • Dependent Care FSA

    • Free One Medical membership for employees and dependents

    Additional Perks

    • Pre-tax commuter benefits

    • Life Insurance + STD/LTD

    • 401(K) with generous company match

    • Unlimited PTO

    • Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more

 

Legora is an Equal Opportunity Employer

At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About People Analyst

The People Analyst is the professional responsible for transforming people data into strategic insights for HR decision-making. They combine data analysis knowledge with people management vision to help organizations understand workforce metrics, turnover, engagement, and diversity.

Key skills include people analytics, workforce analytics, turnover and retention analysis, HR metrics (time-to-hire, cost-per-hire, e-NPS), data visualization (Power BI, Tableau, Visier), workforce planning, and compensation analysis. Knowledge of statistics, SQL, and people analytics tools is a differentiator.

People Analysts in technology companies are highly valued, especially those who can translate complex people data into actionable insights for retention, diversity, and growth strategies. The field offers opportunities from HR analyst to head of people analytics, with a focus on data-driven people management.

About Engineering

Software Engineering goes beyond traditional development, focusing on scalability, performance, and system architecture. Software engineers are responsible for designing infrastructures that support millions of simultaneous users.

Skills include microservices architecture, DevOps, cloud computing, application security, and performance optimization. Knowledge of containerization (Docker, Kubernetes) and CI/CD is increasingly required.

Senior software engineers are rare and highly compensated professionals, with opportunities at major global tech companies.

About UI Design

The User Interface (UI) Design area focuses on creating and designing all the visual elements that users interact with in a digital product. This includes screens, buttons, icons, typography, color palettes, and responsive layouts, ensuring an aesthetically pleasing, consistent, and easy-to-use interface. Skills in tools like Figma and knowledge of design systems are essential.

About Social Media

The Social Media area is one of the most dynamic and constantly evolving fields in digital marketing. Social media professionals are responsible for creating, managing, and optimizing brand presence on digital platforms, building engagement and community with the target audience.

Key skills include social media management (Instagram, TikTok, LinkedIn, Facebook, YouTube), social media content creation, community management, paid social media (Meta Ads, LinkedIn Ads, TikTok Ads), metrics analysis, and strategic planning. Tools like Hootsuite, Sprout Social, Buffer, Later, and analytics platforms are essential.

Social media professionals in technology companies are highly valued, especially those who master paid social, social media analytics, and content strategies for different platforms. The field offers opportunities from analyst to head of social media, with a focus on growth, engagement, and return on investment.

About Branding

Branding is the area responsible for building, managing, and strengthening a brand's identity and market value. Branding professionals create strategies that define how the brand is perceived by the public, from the logo to the complete customer experience.

Key skills include brand strategy, visual identity, brand guidelines, positioning, naming, brand voice, market research, brand equity, and brand management. Knowledge of graphic design (Figma, Illustrator, Photoshop), storytelling, and brand experience is a differentiator.

Branding professionals in technology companies are highly valued, especially those who master employer branding, digital branding, and can build strong, memorable brands in competitive markets. The field offers opportunities from brand designer to head of brand, with a focus on identity, differentiation, and perceived value.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

The Back-End Development Market

The Back-End Development Market: Barriers, Opportunities, and the Path to the Top

Behind every brilliant application, revolutionary artificial intelligence, or successful fintech, there is an invisible and robust ecosystem. Welcome to the Back-End universe.

The Modern Back-End Paradox: Did AI Steal the Jobs?

With the rise of tools like GitHub Copilot and Cursor, many junior developers wonder if the Back-End career is threatened. The short answer is: no. In fact, it has evolved.

Artificial Intelligence has made writing basic "CRUD" (Create, Read, Update, Delete) code trivial. However, the market no longer pays six-figure salaries for writing repetitive code. The global market is actively hunting for Software Engineers—professionals who understand architecture, resilience, latency, and scalability. The Back-End didn't die; the bar was simply raised.

Barriers to Entry: What Separates Juniors from Seniors

Entering Back-End development today requires overcoming technical barriers that go far beyond mastering a programming language (like Java, C#, Go, or Python). Key barriers include:

  • System Design: Knowing how to design a system that supports 100 users is easy. Designing one that handles 1 million requests per second requires deep knowledge of load balancing, caching (Redis/Memcached), and message queues (RabbitMQ/Kafka).
  • Data Complexity: The debate is no longer just "SQL vs. NoSQL". It is about data modeling, replication, sharding, and how to avoid database bottlenecks in distributed systems.
  • Security: With data breaches costing millions, companies require developers to master security practices from day one. Not knowing the vulnerabilities listed by the OWASP Top 10 is a dealbreaker for premium remote roles.
  • DevOps and Cloud Culture: The modern Back-End developer must understand containerization (Docker), orchestration (Kubernetes), and cloud infrastructure (AWS, GCP, Azure).

Golden Opportunities: Where is the Money?

For those who overcome these barriers, the market is a blue ocean of opportunities, especially for US/Global Remote work.

  • Migration to Microservices and Serverless: Corporate giants continue to dismantle legacy monoliths. Professionals who understand the patterns described by Martin Fowler are highly sought after.
  • High-Performance Languages: While traditional languages maintain their corporate strength, the use of Go (Golang) and Rust has skyrocketed for systems requiring massive concurrency and low memory footprint (Green Computing).
  • AI Infrastructure: AI models don't run in a vacuum. There is a massive demand for Back-End engineers proficient in Python and C++ to build data pipelines (MLOps) and the APIs that serve these models in real time.

Success Stories: Architectural Decisions That Changed the Game

True Back-End engineering shines when solving impossible problems. Let's look at real-market examples:

The Discord Case (Migration to Rust): Discord faced latency spikes in its core Read States service, originally written in Go. Because Go's Garbage Collector caused critical millisecond freezes, the team rewrote the service in Rust, completely eliminating latency spikes and supporting trillions of messages with absurd efficiency. This proved the value of choosing the right tool for performance limits.

The Netflix Case (Pioneering Microservices): Netflix transformed a monolithic system that broke under pressure into an architecture of thousands of independently managed microservices. They pioneered the concept of Chaos Engineering, purposely shutting down production servers to ensure their Back-End was resilient to failure.

Practical Tips: How to Land Premium Global Jobs

  1. Master the Fundamentals: Before learning the trendy framework of the month, study data structures, algorithms, and time complexity (Big-O Notation). This is exactly what will be tested in high-level technical interviews (Whiteboard interviews).
  2. Build a Problem-Focused Portfolio: A GitHub repository with a "To-Do List" won't impress anyone. Build an API that handles asynchronous image processing, create a scalable URL shortener, or engineer a messaging system using WebSockets and Redis.
  3. Study Real Cloud Architecture: Get solutions-based certifications (like AWS Certified Developer or Solutions Architect). These serve as a "Seal of Approval" to bypass strict Applicant Tracking Systems (ATS) like Greenhouse or Ashby.
  4. Flawless Technical Communication: According to the Stack Overflow Developer Survey, the highest-paying roles require asynchronous global collaboration. Your code documentation, commit messages, and PR reviews must be pristine and professional.

Verdict: Is a Career in Back-End Worth It?

Absolutely. If you are an analytical person who loves solving complex puzzles and cares about the security and efficiency of things no one sees, the Back-End is your place.

It is a career virtually immune to visual fads. While Front-End libraries change every few years, the fundamentals of relational databases, networks, and operating systems remain the same. It is a rock-solid foundation for a highly lucrative and globalized career.