Customer Trust Specialist
$133,450–$178,000 year
On-siteChicago, Illinois, United States or New York City, New York, United States
Job Summary
Own customer trust requests end-to-end, including security questionnaires, DDQs, and RFP sections, delivering high-quality responses against agreed SLAs in time-sensitive sales and renewal cycles. Answer AI-trust questions regarding data handling, model subprocessors, and regulatory postures like the EU AI Act, coordinating with Privacy and Legal counsel. Communicate Legora's security and AI-governance posture clearly to customer CISOs, GCs, and procurement teams. Master the product and controls to resolve complex trust questions, while running the trust portal and evidence repository to keep SOC 2, ISO reports, and subprocessor lists current. Review security and contractual terms to support DPAs and addendas without slowing deals. Build the response library and automate questionnaire drafting, then drive improvements by monitoring recurring objections and emerging requirements. Support customer audits and shape the global Customer Trust function as an early team member.
Required Qualifications
- 3–5 years in customer trust, security GRC, security assurance, third-party risk, or a closely related customer-facing security or compliance role
- Experience owning complex, high-stakes B2B relationships with demanding security, procurement, and legal stakeholders
- Ability to translate technical security and AI-governance controls into clear, customer-ready answers
- Judgment to know what to answer, what to caveat, and what to escalate
- Skill to notice patterns, anticipate objections before they escalate, and collaborate cross-functionally to drive lasting improvements
- Trait of being customer-obsessed, organized, and detail-oriented under deadline pressure
- Technical curiosity and comfort learning new software, security concepts, and AI and compliance frameworks quickly
- Availability to be in the office 5 days a week
Desired Qualifications
- Familiarity with SOC 2, ISO 27001, GDPR, and NIST, plus DPAs and subprocessor management
- Exposure to AI governance and assurance: EU AI Act, ISO/IEC 42001, NIST AI RMF, model-training and data-retention questions, and AI-subprocessor disclosure
- Certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Implementer / Lead Auditor
- Experience with trust and GRC tooling such as Vanta, Drata, SafeBase, OneTrust, Conveyor, or Loopio
- A working understanding of cloud security and data-handling fundamentals — access, encryption, and data residency
- Background in SaaS, AI, or legal tech environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.