Compliance Attorney

Overview

Reporting to the Chief Data Officer (CDO), the Compliance Attorney coordinates firm-wide compliance activities. This includes working with outside counsel guidelines, managing audit letter requests, supporting vendor management, coordinating client assessments, and handling ISO certification materials. The role partners with internal teams, clients, auditors, and vendors to ensure requirements are met, risks are managed, and responses align with firm policy and professional standards.

Responsibilities

OGC Review

• Receive, review, and log outside counsel review guidelines from clients, providing input to internal stakeholders as needed.
• Work with administrative departments to confirm that operational requirements with clients can be met.
• Coordinate with IT, information security, records management, and firm leadership to ensure compliance with confidentiality, cybersecurity, privacy, and data handling requirements.
• Input and track conflict waivers for business intake.

Audit Letters

• Confirm that each audit request includes the necessary client authorization, audit inquiry letter, response deadline, audit period, entity name, auditor details, and requested scope.
• Identify missing or unclear information and coordinate with the client, auditor, responsible attorney, or internal teams to obtain clarification.
• Ensure drafts are consistent with firm policy, attorney instructions, client authorization, and applicable professional standards.

Vendor Management

• Intake and review administrative vendors that support firm work and clients.
• Assist with reviewing, tracking, and managing vendor contracts, statements of work, engagement letters, service level agreements, renewals, and amendments.
• Monitor contract terms, expiration dates, notice periods, pricing changes, and renewal deadlines.
• Coordinate vendor due diligence with vCISO regarding vendor risk assessments, particularly for vendors with access to confidential client information, firm systems, financial data, records, or sensitive documents.

Client Audits and ISO Certification

• Serve as the point person for client assessments, information security questionnaires, vendor due diligence requests, procurement reviews, client audits, and compliance certifications.
• Gather evidence for client security assessments and ISO 27001 certification to demonstrate controls related to infrastructure and personnel.
• Complete follow-up items from clients or internal auditors for ISO 27001 if findings are identified.

Requirements

• Prior conflicts of interest experience (3–5 years) in a law firm preferred.
• Intapp Suite including Intapp Terms a plus.
• Must be admitted in a jurisdiction that the firm practices in.
• Bachelor’s degree or equivalent combination of education and/or experience.
• JD required.

Compensation & Benefits

• Equal opportunity employer; offers equal opportunity to qualified applicants in accordance with applicable law.
• Participation in the E-Verify program.

Location

• Location not specified in the provided description.