Compliance Attorney

Under the direction of the Chief Data Officer(“the CDO”), the Compliance Attorney is primarily responsible for coordinating firm-wide activities related to the firm’s compliance functions with outside counsel guidelines, audit letter requests, vendor management, client assessments, and ISO certification materials. The role coordinates with internal teams, clients, auditors, and vendors to ensure requirements are met, risks are managed, and responses align with firm policy and professional standards. Duties/Responsibilities OCG Review Receive, review, and log outside counsel review outside counsel guidelines from clients and provide input when necessary to internal stakeholders. Working with administrative departments to confirm operational requirements with clients can be met. Coordinate with IT, information security, records management, and firm leadership to ensure the Firm complies with confidentiality, cybersecurity, privacy, and data handling requirements. Inputting and tracking conflict waivers for business intake. Audit Letters Confirm that each request contains the necessary client authorization, audit inquiry letter, response deadline, audit period, entity name, auditor details, and requested scope. Identify missing or unclear information and coordinate with the client, auditor, responsible attorney, or internal team to obtain clarification. Ensure drafts are consistent with firm policy, attorney instructions, client authorization, and applicable professional standards. Intake a review of administrative vendors that support Firm work and clients. Assist with reviewing, tracking, and managing vendor contracts, statements of work, engagement letters, service level agreements, renewals, and amendments. Monitor contract terms, expiration dates, notice periods, pricing changes, and renewal deadlines. Coordinate vendor due diligence in conjunction with vCISO regarding vendor risk assessments, particularly for vendors with access to confidential client information, firm systems, financial data, records, or sensitive documents. Client Audits and ISO Certification Intake and point person for client assessments, information security questionnaires, vendor due diligence requests, procurement reviews, client audits, and compliance certifications. Gather evidence for client security assessments and ISO 27001 certification to demonstrate controls the Firm takes related to infrastructure and personnel. Conduct any follow-up from clients, or internal auditors for ISO 27001, if there are any findings. Experience Prior conflicts of interest experience (3-5 years) in a law firm preferred. Intapp Suite including Intapp Terms a plus. Must be admitted in a jurisdiction that the Firm practice in. Experience Bachelor’s degree or equivalent combination of education and/or experience. JD required. Robinson & Cole LLP is an equal opportunity employer and will provide equal opportunity to qualified applicants regardless of race, color, religion, national origin, age, gender, gender identity or expression, marital status, sexual orientation, ancestry, physical or mental disability, veteran status, or any other legally protected class in accordance with all applicable laws. We participate in the E-Verify program. #J-18808-Ljbffr