Compliance Attorney

Overview

This role reports to the Chief Data Officer and is responsible for managing firm-wide compliance activities related to outside counsel guidelines, audit letter requests, vendor management, client assessments, and ISO certification materials. The position involves coordination with internal teams, clients, auditors, and vendors to ensure compliance with policies, risk management, and professional standards.

Responsibilities

Outside Counsel Guidelines (OCG) Review

• Receive, review, and log outside counsel guidelines from clients.
• Provide input to internal stakeholders as needed.
• Collaborate with administrative departments to confirm operational requirements can be met.
• Coordinate with IT, information security, records management, and leadership to ensure compliance with confidentiality, cybersecurity, privacy, and data handling requirements.
• Input and track conflict waivers for business intake.

Audit Letters

• Verify that audit letter requests include necessary client authorization, audit inquiry letter, response deadline, audit period, entity name, auditor details, and scope.
• Identify and resolve missing or unclear information by coordinating with clients, auditors, responsible attorneys, or internal teams.
• Ensure drafts comply with firm policy, attorney instructions, client authorization, and professional standards.

Vendor Management

• Review and manage administrative vendors supporting firm work and clients.
• Assist with reviewing, tracking, and managing vendor contracts, statements of work, engagement letters, service level agreements, renewals, and amendments.
• Monitor contract terms, expiration dates, notice periods, pricing changes, and renewal deadlines.
• Coordinate vendor due diligence with virtual Chief Information Security Officer (vCISO) regarding vendor risk assessments, especially for vendors with access to confidential client information, firm systems, financial data, records, or sensitive documents.

Client Audits and ISO Certification

• Serve as the primary contact for client assessments, information security questionnaires, vendor due diligence requests, procurement reviews, client audits, and compliance certifications.
• Collect evidence for client security assessments and ISO 27001 certification demonstrating firm controls related to infrastructure and personnel.
• Conduct follow-up with clients or internal auditors regarding ISO 27001 findings.

Requirements

• Jurisdictional admission to practice law in a jurisdiction where the firm operates.
• Juris Doctor (JD) degree.
• Bachelor’s degree or equivalent combination of education and/or experience.
• 3-5 years of prior conflicts of interest experience in a law firm preferred.
• Experience with Intapp Suite, including Intapp Terms, is a plus.

Compensation & Benefits

Information regarding compensation and benefits is not provided in this description.

Location

Location details are not specified in this description.