Security Lead
About the role
This role is 5 days/week on-site in our Manhattan, NYC office.
Responsibilities
- Own security due diligence for prospective transactions: assess target security posture, architecture, data handling, compliance exposure, and breach history, and translate findings into deal terms, valuation input, and integration conditions
- Define and enforce Day-1 security posture for each transaction, connectivity, identity, and access decisions that protect Legora and its customers while the business integrates
- Lead each acquired product and team through a structured, time-boxed integration onto Legora's security baseline: identity and SSO, endpoint, logging and detection, vendor consolidation, and secure SDLC
- Own the security chapter of Legora's integration playbook, partnering with our Post-Merger Integration team so security milestones are built into every deal plan from day one
- Own the security posture of acquired, not-yet-integrated estates as operating environments: minimum control requirements, risk-based exceptions and interim safeguards, TSA-period security, and monitoring against Legora's enterprise risk profile until each estate is integrated or decommissioned
- Manage compliance scope as acquired systems enter our SOC 2 / ISO and customer-audit boundary, and uphold our customer data commitments across every product we bring into the portfolio
- Work cross-functionally with Corporate Development, Post-Merger Integration, Engineering, Legal, IT, and Product leadership, and report security integration status and risk posture to executive stakeholders
Requirements
- 7+ years in security engineering, security architecture, or technical program management, including direct experience with M&A security diligence and/or post-acquisition integration
- Fluency across the domains integration touches: identity and access management, cloud infrastructure (AWS/GCP/Azure), corporate IT, vulnerability management, and compliance frameworks (SOC 2, ISO 27001)
- Ability to read a pentest report and a deal schedule with equal comfort, you translate technical risk into business terms for executives and deal teams
- A program-management mindset: you run multiple concurrent workstreams to defined milestones and hold teams to exit criteria
- Sound judgment on sequencing, you know when to contain, when to bridge, and when to fully integrate, and you can defend those calls
- Discretion. You'll operate on pre-announcement transactions and hold material non-public information
Qualifications
- Nice to have: Experience building an M&A security function or playbook from scratch at an acquisitive technology company
- Background in B2B SaaS serving regulated or highly security-conscious customers (legal, financial services, healthcare)
- Exposure to transaction mechanics: reps and warranties, escrow and remediation covenants, TSAs
Skills
- Security engineering
- Security architecture
- Technical program management
- M&A security diligence
- Post-acquisition integration
- Identity and access management
- Cloud infrastructure (AWS/GCP/Azure)
- Corporate IT
- Vulnerability management
- Compliance frameworks (SOC 2, ISO 27001)
Benefits
Global collaboration
Competitive package: Comprehensive salary, benefits, and tools for success
Meaningful work: Your efforts shape how thousands of lawyers use AI daily
In-person environment: Union Square office designed for ambitious builders and company provided lunch daily
Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision
Multiple medical plan options through Aetna and Kaiser Permanente
HSA or Healthcare FSA (based on plan selection)
Dental plans via MetLife
Vision plans via Vision Care
Family Support
Generous parental leave
Free access to Maven Clinic
Dependent Care FSA
Free One Medical membership for employees and dependents
Additional Perks
Pre-tax commuter benefits
Life Insurance + STD/LTD
401(K) with generous company match
Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more
Pay
Competitive salary
Schedule
Full-time