Overview
This remote role involves leading the design and development of a practical, scalable enterprise risk taxonomy and operating model for large, complex organizations.
The position focuses on risk practices across Legal, Engineering, Privacy, Compliance, AI Governance, and business functions—assessing current approaches, standardizing risk concepts, and translating the taxonomy into an actionable operating model.
Responsibilities
- Lead the development of a practical risk operating model spanning Legal, Engineering, Privacy, Compliance, AI Governance, and business functions.
- Assess how risk is currently identified, classified, assessed, owned, governed, monitored, and evidenced across the organization.
- Inventory existing risk terminology, categories, classifications, tags, fields, and data structures across current tools and business processes.
- Interview key stakeholders across Legal, Privacy, Compliance, business teams, and AI Governance to understand current practices, requirements, pain points, and future-state needs.
- Identify inconsistencies, duplication, gaps, unclear ownership, and opportunities for standardization across existing risk processes.
- Design an enterprise risk ontology/taxonomy establishing clear definitions and relationships across:
- Risk domains and categories.
- Risk types and attributes.
- Controls and mitigations.
- Legal and regulatory obligations and requirements.
- Processes, systems, owners, and supporting evidence.
- Translate the taxonomy into an actionable operating model defining roles, responsibilities, decision rights, governance structures, escalation pathways, and ongoing maintenance processes.
Qualifications
- Experience in legal engineering, legal operations, enterprise risk management, GRC, compliance operations, or legal technology.
- Strong understanding of risk taxonomies, ontologies, control frameworks, governance models, and structured data.
- Experience mapping complex legal, privacy, compliance, AI, or regulatory requirements into operational workflows and technology systems.
- Demonstrated ability to conduct current-state assessments and design scalable future-state processes and operating models.
- Experience working across Legal, Engineering, Privacy, Compliance, Product, and business stakeholders.
- Strong workshop facilitation, stakeholder interviewing, process mapping, and requirements-gathering skills.
- Ability to translate legal and risk concepts into structured fields, classifications, workflows, controls, evidence requirements, and reporting structures.
- Experience implementing or designing workflows within GRC, legal technology, compliance, risk management, or enterprise workflow platforms.
- Strong project management skills, including roadmap development, stakeholder coordination, issue tracking, and executive-level communication.
Compensation & Benefits
- Estimated total compensation:
- Full-time attorney roles: $104,500–$325,000 per year
- Non-attorney roles: $71,250–$309,750 per year
- Compensation decisions are based on experience, skills, certifications, location, and business needs (including, but not limited to, these factors).
- Additional benefits may include health, dental, and vision insurance; paid holidays and PTO; flexible work arrangements; and professional development opportunities and tools.
Location
Remote
Equal Opportunity & Accommodations
- Equal employment opportunity in recruitment and employment without discrimination or harassment on any basis protected by applicable law.
- Reasonable accommodations are provided for individuals with disabilities who require accommodations to participate in each stage of the recruitment process (upon request and consistent with applicable laws).
Background Checks / Work Authorization
Employment may be contingent upon successful completion of a background check, providing proof of identity, and possessing the necessary legal authorization to work.
Pursuant to the San Francisco Fair Chance Ordinance, NY Fair Chance Act, and Los Angeles Fair Chance Initiative, qualified applicants with arrest and conviction records will be considered.