Head of Legal, Risk & Compliance

Job Description

Job Description

Position Overview

The Head of Legal, Risk & Compliance (who also serves as Chief Risk Officer) is a senior executive accountable for the legal, regulatory, risk management, compliance, and governance obligations of DataCT LLC in its capacity as the independent Administrator of the CT Plan. The role is the principal legal and compliance partner to the Chief Administration Officer and is responsible for protecting the independence of the Administrator function, managing related-party considerations with DataCT subcontractors (including DataBP LLC), and ensuring full compliance with the governance framework of the CT Plan.

This is a hands-on, execution-focused role in a growing organization. The Head of Legal, Risk & Compliance builds and owns DataCT's legal operations, enterprise risk framework, compliance program, audit program, and regulatory engagement strategy, while advising the DataCT Board and the CT Plan Operating Committee on matters of independence, fiduciary conduct, and regulatory obligation.

DataCT operates under the independence, governance, and transparency framework established in the CT Plan and the Administrator RFP. All staff are expected to uphold the independence of the Administrator function, avoid actual or perceived conflicts of interest, and support the governance reporting obligations of the Operating Committee of CT Plan LLC.

Core Responsibilities

Legal and Governance Leadership

• Serve as the senior legal executive of DataCT LLC, providing counsel to the CAO, the DataCT Board, and (as required) the CT Plan Operating Committee.

• Lead drafting, negotiation, and administration of all material agreements, including the Administrator Services Agreement with CT Plan LLC, subcontractor agreements (including DataBP LLC and Deloitte entities), customer licensing agreements, and vendor contracts.

• Own corporate governance for DataCT LLC as a Delaware LLC operating in New York, including Board Books, resolutions, minutes, member consents, Operating Agreement maintenance, and governance charters.