Senior Commercial Counsel

The role

As the first in-house lawyer, you will own commercial contracting, privacy, and communications compliance. You will work with product and engineering to shape features and manage legal questions regarding AI and data privacy.

What you will do

• Own commercial contracting end to end including MSAs, order forms, SOWs, DPAs, security addenda, NDAs and pilot agreements
• Build templates, playbooks and fallback positions for Sales and Growth
• Set and defend data privacy positions across GDPR, UK GDPR, CCPA/CPRA, PIPEDA and APAC regimes
• Run the subprocessor management program
• Own communications compliance for automated outbound products including CAN-SPAM, TCPA, CASL, ePrivacy and PECR
• Own AI governance including EU AI Act, US state AI laws, and FTC guidance
• Counsel product and engineering on features and integrations before launch
• Negotiate inbound agreements with data, inference, telephony and cloud vendors
• Partner with Security on SOC 2, ISO 27001 and NIST alignment
• Coordinate outside counsel on corporate matters

Required qualifications

• JD and active membership in good standing with at least one US state bar
• 4 to 8 years of legal practice
• At least 2 years in-house at a B2B SaaS or enterprise software company or in a technology transactions practice serving them
• Experience taking large, complex, heavily negotiated MSAs, DPAs and security addenda with Fortune 500 or Global 2000 teams from first redline to signature
• Practical command of data privacy law in the US (CCPA/CPRA and other state statutes) and the EU and UK (GDPR, UK GDPR, ePrivacy)
• Working knowledge of marketing and communications compliance: CAN-SPAM, TCPA and state telemarketing and call-recording laws
• Working knowledge of AI regulation and standards (EU AI Act, US state AI laws, NIST AI RMF)
• Solid understanding of how the technology works: inference, context windows, retrieval, agents and tool use
• Comfortable reading architecture diagrams, data flow maps and API documentation
• Has built or materially improved contract templates, playbooks or CLM tooling
• Familiarity with SOC 2 and enterprise security questionnaires
• Clear writer and direct communicator

Nice to have

• California bar membership preferred
• Experience with products that handle customer data at scale or build on large language models
• CIPP/E or CIPP/US
• CASL and PECR
• Experience as a first or early legal hire
• ISO 27001, regulated industries, public sector or customer-hosted deployments

Benefits

• Competitive pay with considerable equity upside
• Medical, dental, and vision, including 100% company-paid plans for you and eligible dependents
• Company-paid life & AD&D, plus short- and long-term disability
• 401(k) with automatic enrollment
• Unlimited PTO, plus paid sick leave, company holidays, and bereavement
• Up to 20 weeks of paid parental leave at 100% pay (birth, adoption, or foster)
• Wellness stipend: $375/quarter
• Learning stipend: up to $2,000/year
• Internet & cell phone stipend: $25/month
• Mental health support, virtual care, and care navigation
• Fertility & family-building support, plus backup care membership
• Pre-tax commuter benefits (transit & parking)

About the company

Rox builds a revenue operating system using autonomous revenue agents to manage the end-to-end customer lifecycle. The platform powers Global 2000 leaders in banking, hardware, construction, and sovereign AI.