About Us
Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler.
We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
Joining Legora means three things.
- We lean in: ownership over titles, outcomes over intentions.
- We fight for excellence: high standards, direct, ego-free feedback.
- We grow together: as a team and with our customers.
Mission before ego. Everyone contributes. No one coasts.
If you’re driven by impact, pace, and raising the bar. This is the place.
About the role
Legora builds AI software for legal work. Our products and operations depend on cloud platforms, AI model providers, software vendors, and other service partners. We need to understand which dependencies could disrupt our service or put information at risk, and act on that understanding.
You will lead our third-party risk program within Security. You will set assessment standards, lead complex reviews, and make sure significant findings reach a decision and an accountable owner. The role combines program leadership with hands-on assessment work.
What you will do
- Assess suppliers in context. Understand the service being purchased, the information it will handle, the access it needs, and the consequences of failure. Set the depth of each review accordingly. Examine supplier evidence and investigate gaps with the relevant technical teams.
- Understand our critical dependencies. Maintain a view of critical providers, their key subcontractors, and dependencies shared across services. Identify where we depend heavily on one provider or would struggle to replace it.
- Turn findings into action. Recommend approval conditions and practical mitigations, including changes to access, data sharing, or how a service is used. Agree owners and deadlines, track completion, and escalate unresolved risks for an authorized decision.
