Compliance & Regulatory Counsel

Overview

This role serves as Compliance and Regulatory Counsel, acting as a key legal partner to deliver and scale critical legal support for a growing global B2B SaaS organization serving multi-national enterprises and public sector entities.

Responsibilities include supporting the compliance and regulatory function for the organization as a SaaS provider, advising on laws and regulations impacting business operations, and supporting frameworks governing enterprise customers. The role also supports corporate and sales compliance by ensuring accurate and timely filings of various business and regulatory registrations for all jurisdictions in which the organization operates, maintaining an internal database of such filings, staying ahead of legal and regulatory changes, developing internal compliance project roadmaps, and administering compliance programs across multiple legal and risk frameworks.

This position partners with Information Security, Privacy, IT, HR, Finance, Product, and other subject matter experts to translate legal and regulatory risk into clear guidance for the business and customer-facing responses.

Responsibilities

Regulatory Guidance & Cross-Functional Partnership

• Research and advise on complex global regulatory and compliance frameworks affecting the organization as a B2B SaaS provider.
• Guide responses for security questionnaires, TPRM assessments, RFIs, RFPs, and high-priority customer due diligence requests.
• Translate complex technical, security, and legal information into clear, customer-facing documentation.

Data Privacy & AI Governance

• Partner with Sales, Finance, Procurement, and Information Security teams to manage regulatory, privacy (GDPR/CCPA), and AI data protection risks.
• Draft and update critical data privacy agreements (DPAs) and standard contractual clauses (SCCs).
• Support AI Governance initiatives to ensure ethical and legally sound product deployment.
• Coordinate corporate governance programs, including facilitating annual Employment/EE compliance training and collecting data for global ESG annual reporting.
• Serve as a legal stakeholder for independent audits, assisting with readiness and documentation gathering for annual SOC 2 audits.
• Support the preparation and distribution of compliance documentation, certifications, attestations, policies, and other customer-facing materials.
• Maintain and oversee standardized responses and supporting documentation for common privacy and compliance requirements.
• Draft and update data protection documentation, including DPAs and SCCs.
• Support hardware compliance efforts, including the company’s export control framework and tracking and regulatory reporting for environmental supply chain standards.
• Identify inconsistencies, gaps, or outdated information in customer-facing compliance materials and coordinate updates with appropriate subject matter experts.
• Support the implementation of AI Governance frameworks to ensure ethical, compliant, and legally sound deployment of artificial intelligence capabilities within products.

Compliance, Audit & Legal Operations

• Serve as a primary legal contact for independent audits, including SOC 2 readiness, policy drafting, and evidence collection.
• Manage corporate governance tasks, including annual compliance training, global ESG data collection, and export/hardware compliance reporting.
• Maintain knowledge bases, response libraries, templates, and documentation repositories to increase self-service and improve response efficiency.
• Support annual corporate insurance review and renewal process by gathering underwriting data across departments (Cyber, D&O, General Liability).
• Provide ad hoc support on commercial litigation matters, including managing document holds, discovery requests, and coordinating logistics with external counsel.

Requirements

Key Qualifications

• J.D. or LL.M. with active US state bar membership in good standing.
• 5+ years of legal practice with expertise in regulatory compliance, data privacy, cloud/SaaS transactions, and third-party risk management.
• Working knowledge of foundational tech and privacy regulations (e.g., GLBA, FERPA, GDPR/US privacy laws) and strong interest in emerging frameworks like the EU AI Act and DORA.
• Proven ability to manage multi-stakeholder workflows, prioritize high-volume deliverables, and operate effectively under tight deadlines.

Preferred Qualifications

• Experience supporting B2B SaaS, cybersecurity, or technology organizations.
• Professional Privacy Certification (e.g., CIPP/US or CIPP/E).
• Experience with third-party risk management platforms (TPRM) and regulatory filing platforms such as SAM.gov.

Compensation & Benefits

Salary

• $150,000 - $163,000 per year + bonus

Benefits

• Health, Dental, and Vision Benefits
• Flexible PTO, Sick Time Prorated Based on Date of Hire, and All Federal Holidays (US Only) + 3 Days of Paid Volunteer Time
• Non-Commissioned Positions may be eligible to participate in the Annual Discretionary Bonus Plan
• FSA and Dependent Care Accounts + EAP, where applicable
• Educational Reimbursement
• 401k with Employer Match or Pension where applicable
• Pet Insurance (US Only)
• Parental Leave (US Only)
• Hybrid and Remote Work Model

Core Competencies

• Compliance & Security Acumen – Applies practical knowledge of security, privacy, compliance, and risk requirements to business situations.
• Cross-Functional Collaboration – Coordinates diverse stakeholders and creates accountability for timely and accurate project milestones.
• Judgment & Prioritization – Distinguishes routine requests from complex or high-risk matters and engages the appropriate subject matter experts.
• Process & Operational Excellence – Builds scalable processes, improves workflows, and identifies opportunities for automation and self-service legal processes.