Compliance and Regulatory Counsel

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct research and provide guidance on intricate global regulatory and compliance frameworks impacting ExtraHop as a B2B SaaS provider.

• Assist in formulating responses for security questionnaires, TPRM assessments, RFIs, RFPs, and customer due diligence inquiries.

• Convert complex technical, security, and legal concepts into clear, client-facing documentation.

• Collaborate with Sales, Finance, Procurement, and InfoSec teams regarding regulatory, privacy, and AI data protection challenges.

• Draft and revise data privacy agreements and standard contractual clauses.

• Contribute to AI Governance initiatives and ensure legally compliant product deployment.

• Oversee corporate governance programs, annual compliance training, and the collection of global ESG reporting data.

• Act as the legal representative for independent audits, including SOC 2 readiness, documentation, and evidence gathering.

• Maintain standardized responses, knowledge bases, templates, and compliance documentation.

• Facilitate hardware compliance, export control, and environmental supply chain reporting.

• Assist with the annual corporate insurance review and renewal process.

• Provide ad hoc support for commercial litigation, including document holds and discovery requests.

⛳️ Requirements

• Juris Doctor (J.D.) or Master of Laws (LL.M.) with an active US state bar membership in good standing.

• Over 5 years of legal practice experience.

• Proficiency in regulatory compliance, data privacy, cloud/SaaS transactions, and third-party risk management.

• Familiarity with GLBA, FERPA, GDPR, and US privacy regulations.

• Strong interest in emerging frameworks such as the EU AI Act and DORA.

• Capability to manage workflows involving multiple stakeholders, prioritize high-volume tasks, and perform effectively under tight deadlines.

• Experience in supporting B2B SaaS, cybersecurity, or technology organizations is preferred.

• Professional Privacy Certification (e.g., CIPP/US or CIPP/E) is preferred.

• Experience with third-party risk management platforms and regulatory filing platforms such as SAM.gov is preferred.

🏝️ Benefits

• Health, Dental, and Vision Benefits.

• Flexible PTO.

• Sick Time Prorated Based on Date of Hire.

• All Federal Holidays (US Only).

• 3 Days of Paid Volunteer Time.

• Annual Discretionary Bonus Plan eligibility for non-commissioned positions.

• FSA and Dependent Care Accounts.

• EAP, where applicable.

• Educational Reimbursement.

• 401k with Employer Match or Pension where applicable.

• Pet Insurance (US Only).

• Parental Leave (US Only).

• Hybrid and Remote Work Model.