Senior Legal, Privacy & Export Compliance

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” sec...

We’re looking for a highly organized, execution-focused legal, privacy, compliance, and export compliance operations professional to lead operational workflows across Legal, Privacy, Compliance, and Export Operations. You will run high-volume, business-critical processes that directly impact enterprise deals, custom...

You will work cross-functionally with Legal, InfoSec, GTM, Finance, Product, Engineering, HR, and Operations to help scale our legal and compliance infrastructure in a practical, business-enabling way.

This is a highly operational role focused on execution, coordination, process ownership, and scalable compliance workflows rather than traditional legal practice.
This role is ideal for someone who enjoys building and scaling programs in a fast-growing environment, is comfortable working independently with limited structure, and thrives wearing multiple hats across legal, privacy, compliance, and export operations.
Support day-to-day administration and ongoing management of the e2Open export compliance platform and related global trade workflows.
Perform restricted and denied party screening and sanctions checks in accordance with U.S. EAR, OFAC and applicable international export control and trade requirements; escalate and resolve flags in a timely manner.
Assist with export classification, recordkeeping, and maintenance of export-related documentation.
Drive compliant customer, partner, reseller, and channel onboarding requirements by managing export controls, sanctions, and restricted-party diligence end-to-end.
Partner with Legal, Finance, Sales, Channel, and Operations to support compliant domestic and international transactions.
Help ensure compliance with applicable export control and sanctions regulations, including EAR, OFAC, and other relevant trade laws.
Maintain and improve scalable export compliance procedures, workflows, documentation, training materials, and operational tracking processes, including requests, approvals, escalations, investigations, and audit activities
Maintain records and documentation necessary to support audit readiness, regulatory inquiries, and internal compliance reviews
Assist with third-party due diligence and partner screening for international customers, channel partners, and vendors.
Support internal and external audits and regulatory inquiries relating to export compliance controls and documentation.
Support administration of Horizon3.ai’s global privacy operations program.
Review, track, and maintain:
Data Processing Agreements (DPAs)
Standard Contractual Clauses (SCCs) and other data transfer mechanisms
Privacy notices and internal privacy documentation
Subprocessor lists and related documentation
Support operational privacy workflows, including maintenance of AI governance documentation and other data protection artifacts.
Help maintain and update customer-facing privacy resources (e.g., trust center content, FAQs, standard responses) to ensure they are accurate and aligned with our policies and certifications.
Maintain and refresh customer-facing compliance materials, including standard security and compliance responses, decks, and documentation libraries.
Coordinate collection, organization, and delivery of compliance evidence for:
Customer security and compliance diligence
Due diligence questionnaires (DDQs) and RFPs/RFIs
Vendor risk and onboarding requests
Regulatory and certification-related assessments (e.g., SOC 2, ISO-style controls).
Support customer-facing compliance and trust activities with enterprise procurement, security, privacy, and legal stakeholders.
Maintain scalable compliance operations and documentation repositories that support enterprise customer diligence, audit readiness, and reduced friction in sales and renewal cycles
Support scalable workflows for privacy, compliance, and customer trust operations, including intake coordination, documentation management, and cross-functional request tracking.
Help improve operational processes that reduce customer diligence friction, accelerate enterprise transactions, and support audit readiness.
Success in this role means improving customer diligence response times, maintaining audit readiness, supporting scalable export compliance operations, and reducing operational friction across enterprise transactions and renewals.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.
In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

5+ years of experience in legal operations, compliance, privacy, export compliance, contract management, and/or paralegal roles.
Experience supporting SaaS, cybersecurity, or technology companies.
Working familiarity with:
GDPR and core global privacy principles
CCPA/CPRA
DPAs, SCCs, and cross-border data transfer mechanisms
SOC 2, ISO 27001,or similar security/compliance frameworks
Customer diligence, DDQs, and audit support processes
Hands-on experience with e2Open or similar export compliance and denied-party screening platforms.
Working knowledge of U.S. export controls and sanctions regulations, including EAR, OFAC, restricted-party screening, and international trade compliance requirements.
Experience supporting operational export compliance workflows for global SaaS, cybersecurity, or technology transactions
Strong organizational skills, exceptional attention to detail, and comfort owning repeatable, high-volume processes.
Proven ability to manage multiple priorities independently in a fast-paced environment.
Experience operating in a fast-paced, high-volume environment with competing business priorities and rapid turnaround expectations.
Excellent written communication and operational documentation skills.
Experience with CLM systems and legal workflow/operations platforms.
Experience working within an in-house legal department at a technology, SaaS, cybersecurity, or other high-growth company.
Experience working with trust-center workflows, compliance documentation repositories, ticketing/intake systems, and GRC platforms
Experience supporting customer-facing compliance programs, including security questionnaires, audits, and trust-related collateral.
Experience supporting enterprise customer contracting and compliance/diligence processes