Overview
The organization is seeking a hard-working, adaptable attorney to support a rapidly growing and evolving legal team. This role focuses primarily on Privacy, Product and Marketing compliance, SaaS contract review and negotiation, and Intellectual Property (including trademarks and marketing IP). The position also provides legal counsel on product and marketing-related matters, including AI/ML and the EU AI Act. Additional support for other substantive legal areas will be provided as available and as needed.
Responsibilities
Privacy, Cybersecurity and AI
- Provide guidance to internal stakeholders (PrivacyOps, Marketing, Product, Tech, Finance, Support, and Employment) on privacy, AI, and security matters.
- Maintain working knowledge of privacy and AI laws and regulations, including GDPR, CCPA, sectoral privacy laws, and the EU AI Act, and stay current on emerging regulation.
- Maintain, develop, and evolve privacy notices, policies, procedures, DPIAs, and DPAs, including subprocessor determinations and notifications, and support internal training.
- Oversee DSAR processes, subprocessor audits, and Trust Center content.
- Direct outside counsel on escalated DSARs, complaints, and disputes, including annual policy and playbook updates and process and website audits.
- Provide AI guidance and support AI product development, including AI assessments, AI vendor reviews, disclaimer guidance, and EU AI Act compliance.
- Partner with the Data Governance team on global privacy initiatives to support legal obligations to protect data of customers, employees, vendors, and other third parties.
- Review and maintain customer and vendor security and privacy questionnaires (including SIG and CAIQ) and related field guidance.
- Regularly review and maintain Data Privacy/Cyber Security, Marketing, and AI handbooks and job aids.
- Support the CISO organization during a Security Incident, including regulatory and customer notification, contractual requirements, root cause analysis reviews, and internal and external communications.
- Assist with annual ISO and SOC assessments and audits, and review and update relevant GRC policies annually for legal and regulatory changes.
SaaS Contracts, Technology Transactions and Partnerships
- Review, draft, and negotiate SaaS agreements, DPAs, NDAs, vendor agreements, and partnerships, with a focus on privacy and AI/ML terms while balancing risk with business goals.
- Review high-priority contracts and procurement requests and manage escalations on contract terms and obligations (including export control and government customer terms).
- Scope and conduct initial legal reviews of partnership initiatives, such as content, channel, and technology partnerships.
- Direct outside counsel on in-depth technical reviews of major contracts as needed.
- Create and enforce templates; keep playbooks, written guidance, and talking points current for Contracts and Sales teams on recurring privacy, cybersecurity, IP, and AI/ML topics, including quarterly training meetings.
- Help demanding business teams respond promptly to legal inquiries on customer and vendor questionnaires.
- Review and stay current on emerging regulations as they apply to customer, vendor, and partner agreements and the products and marketing supported.
Marketing IP, Trademarks, Copyright and Brand
- Review marketing collateral, content, Help Center articles, sales enablement materials, and promotional campaigns for copyright, licensing, third-party rights, claims, and disclaimers, flagging risks.
- Maintain working knowledge of marketing and advertising laws, including CAN-SPAM, TCPA, DNC, telephone marketing, cookie consent, and the FTC Negative Option Rule, and guide Marketing accordingly.
- Assist with trademark matters, including clearance, registration, portfolio maintenance, enforcement, and brand protection escalations.
- Advise on copyright, ® marks, and publication review for content and author materials.
- Maintain brand guidelines and guide teams on proper use.
- Support patent filings and IP agreement creation and negotiation in close collaboration with outside counsel.
- Advise on IP issues in product development, including AI/ML training data, outputs, and open source.
Product Development and Other Legal Support
- Support product and project development from inception through GTM and EOL, including project scoping, initial technical legal reviews, and regular product meetings.
- Provide regular guidance to Technical Support, Sales, Authors, Marketing, Security, and other teams on product and privacy issues, including support escalations.
- Work with outside counsel and a paralegal or assistant to delegate routine and specialized work and help evaluate that model.
- Coordinate with Finance and Corporate Legal and drive process improvements.
- Support other legal initiatives and special projects when needed.
Requirements
- Minimum of 5 years of substantive legal experience with a legal department or a nationally recognized law firm.
- JD from an ABA-accredited law school.
- Current bar membership in good standing.
Preferred Qualifications
- Substantial experience reviewing and negotiating SaaS agreements, including data processing, security, liability, and AI/ML-related terms.
- Strong working knowledge of privacy law and practice, with hands-on experience in DPAs, DPIAs, and customer privacy and security questionnaires.
- Good communication (oral and written) and strong interpersonal skills across departments and externally; proactive approach to providing counsel to clients.
- Sound judgment and the ability to make reasoned recommendations; ability to determine who should be kept informed.
- In-house experience with a technology/SaaS company.
- Certified Information Privacy Professional (CIPP/US) or Certified Information Privacy Manager (CIPM) certification.
- Experience working with external regulators and customers.
- Experience with technology transactions and partnerships (content, channel, and technology), including working with outside counsel on in-depth reviews.
- Working knowledge of intellectual property law, including trademarks, copyright, and marketing IP, and familiarity with patent filings in collaboration with outside counsel.
- Familiarity with privacy and marketing laws (including CAN-SPAM, TCPA, and DNC) and with the EU AI Act and emerging AI regulation.
- Experience supporting security incident response, including customer and regulatory notification, and ISO/SOC audits and assessments.
- Comfort managing outside counsel and scaling support through a paralegal or assistant.
Compensation & Benefits
- Annual US base salary range: $129,200 - $170,000 USD.
- Actual compensation depends on location, skills, experience, and other factors.
- Additional benefits and bonuses may apply.
- Benefits include competitive compensation, bonus eligibility, comprehensive medical coverage, unlimited PTO, wellness reimbursement, professional development funds, and more.
- Applications must be submitted within 90 days after the initial posting date to be considered.
Location
Work is performed in an office (or home office) environment.
Work Eligibility
Applicants must have the existing legal right to work in the country where this role is located, on an ongoing basis, without any sponsorship or assistance. The organization will not sponsor, file, transfer, extend, or otherwise support any visa, work permit, employment authorization, or other immigration benefit for this position, whether now or in the future. This includes, without limitation, new or renewed work visas, visa transfers, extensions or changes of status, and employment-based residency or permanent residence applications.