Director of Compliance

About Norm Ai

Norm Ai, the leading Legal & Compliance AI company, has a client base with a combined $30 trillion in assets under management. By turning legal code into AI code, Norm enables enterprises to move faster and more comprehensively in their legal and compliance processes with reliability and trust.

Norm's platform combines frontier AI, proprietary legal reasoning systems, and embedded legal and regulatory expertise.

We have recently raised more than $140 million, backed by Blackstone, Bain Capital, Vanguard, Citi, New York Life, TIAA, Coatue, Craft Ventures, Henry R. Kravis (KKR co-founder), and Marc Benioff (Salesforce CEO).

Norm Ai pioneered Legal Engineering, the process that empowers lawyers to build and supervise domain-specific AI agents with Norm's proprietary suite of no-code software tools. We hired dozens of lawyers from premier U.S. law firms and trained them as Legal Engineers, who specialize in Large Language Model powered legal workflows.

Norm Ai technology is deployed inside many of the largest and most consequential institutions in the world. The company is growing quickly and hiring across all teams.

About Norm Law

Norm Law is the first AI-native full-service law firm for global institutional clients like Blackstone (see recent coverage of our Blackstone partnership here:  Legal Engineering, a discipline pioneered by Norm Ai, where lawyers develop legal AI agents, powers Norm Law to deliver faster, more precise, and more consistent legal services. With purpose-built AI agents completing first passes of work, Norm lawyers supervise, review, and focus on what matters most: strategic judgment and expert advice.

Norm Law and Norm Ai, together, are building Legal AGI.

Overview of Role

Norm Ai is seeking a highly experienced Director of Compliance to design, build, and lead the company's legal, ethical, regulatory, and data compliance program. This role will oversee behavioral compliance, professional responsibility obligations, privacy and data governance, and regulatory compliance across Norm Ai and its affiliated law firm, Norm Law.

Reporting to the Chief Security Officer (CSO), this role acts as the authoritative compliance voice for the company, translating legal and regulatory obligations into policies, operational requirements, governance models and organizational behavior. The role will work cross-organizationally and ensure that the company maintains a world-class compliance posture.

Core Objectives

This role exists to uphold legal and ethical obligations, build a culture of compliance, ensure privacy and data governance compliance, and protect client and privileged legal information, in close partnership with the Security and Legal teams. The Director of Compliance will lead from a legal, regulatory and policy-driven perspective, and will ensure that the right governance, controls, and accountability structures are in place while collaborating with security experts on technical implementation.

Responsibilities

Legal, Ethical & Professional Responsibility Compliance

• Uphold and operationalize legal and ethical obligations, including but not limited to:
  • ABA Model Rules (confidentiality, conflicts of interest, supervision, professional independence)
  • MSO and law firm affiliation models
  • Insider trading, MNPI handling, and trading policies
  • Whistle blower and escalation frameworks
• Own the company-wide ethical compliance program, including codes of conduct, conflicts of interest, attestations, restricted lists, investigations, and disciplinary processes.
• Advise leadership on legal and regulatory risk related to business practices, product design, and internal operations.

Privacy, Data Governance & Information Stewardship

• Own the data governance and classification policy, defining how client data, privileged legal information, MNPI, personal data, and internal information are categorized, handled, retained, and shared.
• Ensure compliance with privacy and data protection laws (GDPR, CCPA/CPRA, emerging U.S. state laws, and international regimes as applicable).
• Establish governance over data use, access, retention, deletion, and permissible purposes, working with Security and Engineering to ensure…