Description:

About Norm Ai
Norm Ai, the leading Legal & Compliance AI company, has a client base with a combined $30 trillion in assets under management. By turning legal code into AI code, Norm enables enterprises to move faster and more comprehensively in their legal and compliance processes with reliability and trust.

Norm's platform combines frontier AI, proprietary legal reasoning systems, and embedded legal and regulatory expertise.

We have recently raised more than $140 million, backed by Blackstone, Bain Capital, Vanguard, Citi, New York Life, TIAA, Coatue, Craft Ventures, Henry R. Kravis (KKR co-founder), and Marc Benioff (Salesforce CEO).

Norm Ai pioneered Legal Engineering, the process that empowers lawyers to build and supervise domain-specific AI agents with Norm's proprietary suite of no-code software tools. We hired dozens of lawyers from premier U.S. law firms and trained them as Legal Engineers, who specialize in Large Language Model powered legal workflows.

Norm Ai technology is deployed inside many of the largest and most consequential institutions in the world. The company is growing quickly and hiring across all teams.

About Norm Law
Norm Law is the first AI-native full-service law firm for global institutional clients like Blackstone (see recent coverage of our Blackstone partnership here: https://www.reuters.com/legal/transactional/legal-ai-startup-draws-new-50-million-blackstone-investment-opens-law-firm-2025-11-20/. Legal Engineering, a discipline pioneered by Norm Ai, where lawyers develop legal AI agents, powers Norm Law to deliver faster, more precise, and more consistent legal services. With purpose-built AI agents completing first passes of work, Norm lawyers supervise, review, and focus on what matters most: strategic judgment and expert advice.

Norm Law and Norm Ai, together, are building Legal AGI.

Overview of Role:
Norm Ai is seeking a highly experienced Director of Compliance to design, build, and lead the company's legal, ethical, regulatory, and data compliance program. This role will oversee behavioral compliance, professional responsibility obligations, privacy and data governance, and regulatory compliance across Norm Ai and its affiliated law firm, Norm Law.

Reporting to the Chief Security Officer (CSO), this role acts as the authoritative compliance voice for the company, translating legal and regulatory obligations into policies, operational requirements, governance models and organizational behavior. The role will work cross-organizationally and ensure that the company maintains a world-class compliance posture.

Core Objectives
This role exists to uphold legal and ethical obligations, build a culture of compliance, ensure privacy and data governance compliance, and protect client and privileged legal information, in close partnership with the Security and Legal teams. The Director of Compliance will lead from a legal, regulatory and policy-driven perspective, and will ensure that the right governance, controls, and accountability structures are in place while collaborating with security experts on technical implementation.

Responsibilities:

Legal, Ethical & Professional Responsibility Compliance

Uphold and operationalize legal and ethical obligations, including but not limited to:
ABA Model Rules (confidentiality, conflicts of interest, supervision, professional independence)
MSO and law firm affiliation models
Insider trading, MNPI handling, and trading policies
Whistleblower and escalation frameworks
Own the company-wide ethical compliance program, including codes of conduct, conflicts of interest, attestations, restricted lists, investigations, and disciplinary processes.
Advise leadership on legal and regulatory risk related to business practices, product design, and internal operations.

Privacy, Data Governance & Information Stewardship

Own the data governance and classification policy, defining how client data, privileged legal information, MNPI, personal data, and internal information are categorized, handled, retained, and shared.
Ensure compliance with privacy and data protection laws (GDPR, CCPA/CPRA, emerging U.S. state laws, and international regimes as applicable).
Establish governance over data use, access, retention, deletion, and permissible purposes, working with Security and Engineering to ensure appropriate technical enforcement.
Review and approve workflows, tools, and processes involving sensitive, regulated, or client data.

Compliance Program Leadership & Culture

Build and sustain a culture of compliance, accountability, and ethical decision-making across the organization.
Develop and deliver training, communications, and guidance to ensure employees understand their legal, ethical, and data-handling obligations.
Lead or oversee investigations into compliance violations and manage remediation and corrective action plans.
Support Norm Law in meeting professional responsibility standards, client confidentiality obligations, and records management requirements.

Cross-Functional & Security Partnership

Partner closely with the Security team to:
Translate regulatory, legal, and data governance requirements into security and access control expectations
Validate that security controls appropriately support compliance obligations
Serve as the compliance authority, while relying on Security for control design, implementation, and operation.

Regulatory & Stakeholder Engagement

Serve as primary liaison to internal and external counsel on compliance matters.
Prepare documentation, evidence, and responses for audits, assessments, regulatory inquiries, and client diligence.
Monitor evolving regulations (privacy, AI governance, financial and professional services) and proactively adapt the compliance program.

Skills & Experience - Core

J.D. from recognized law school
8+ years of experience in regulatory, legal, or compliance leadership roles within financial services, insurance, legal services, or a similarly regulated industry.
Deep experience in professional responsibility, ethical compliance, insider trading/MNPI governance, privacy law, and data governance.
Experience defining and governing data classification and handling requirements from a policy and legal perspective.
Demonstrated ability to operationalize compliance requirements into policies, governance frameworks, and organizational processes.
Proven experience conducting compliance investigations and remediation efforts.
Excellent communication skills, including advising senior leadership and working cross-functionally with both technical and non-technical teams.

Skills & Experience - Pluses

Experience supporting or working within a law firm, Managed Services Organization (MSO) model, or professional services organization.
Familiarity with AI governance, responsible AI frameworks, or emerging AI regulations.
Experience partnering with security teams on compliance frameworks (ex. SOC2, ISO 27001) without owning security execution.
Prior experience building compliance programs in high-growth startup environments.

Comp and Benefits
$270,000-$310,000 per year plus equity.

The range displayed in this job posting reflects the minimum and maximum target for new hire salary for this position. Within the range, individual pay is determined by various factors, including job-related skills (as uncovered during the interview process), experience, and relevant education or training. Please note that the compensation details listed here reflect the base salary only, and do not include equity or benefits. We offer a competitive salary along with equity compensation. Our comprehensive benefits package includes a 401(k) plan with an employer match. Employees enjoy top-tier insurance coverage, encompassing health, dental, hospital, accident, and vision plans. For candidates needing to relocate to NYC, we provide relocation reimbursement. You'll thrive in our fast-paced learning environment where professional growth is constant.