ExtraHop
ExtraHop
501 – 1,000 Employees
CybersecurityEnterpriseSecurity
ExtraHop develops cybersecurity and network management solutions for enterprises. Its platform applies real-time analytics and machine learning to provide visibility into IT infrastructure, monitor traffic patterns, identify unusual activity, and help security teams detect and respond to cyber threats. ExtraHop operates in the cybersecurity, security, and enterprise technology sectors and maintains a careers presence for professionals exploring opportunities with the company.

Compliance and Regulatory Counsel – United States Remote

Advise ExtraHop on global compliance, privacy, AI governance, audits, and SaaS risk as part of its cybersecurity legal function.

Description

  • Analyze global regulatory and compliance frameworks relevant to ExtraHop’s B2B SaaS business
  • Lead responses to security questionnaires, third-party risk assessments, RFIs, RFPs, and customer due diligence requests
  • Convert complex technical, security, and legal concepts into clear documentation for customers
  • Collaborate with Sales, Finance, Procurement, and InfoSec on regulatory, privacy, and AI data-protection risks
  • Draft and maintain data privacy agreements and standard contractual clauses
  • Contribute to AI governance programs and legally compliant product deployment
  • Coordinate corporate governance initiatives, annual compliance training, and global ESG reporting data collection
  • Act as legal contact for independent audits, including SOC 2 preparation, documentation, and evidence gathering
  • Manage standardized responses, knowledge bases, templates, and other compliance materials
  • Support hardware compliance, export controls, and environmental supply-chain reporting
  • Assist with the annual review and renewal of corporate insurance
  • Provide ad hoc commercial litigation support, including document holds and discovery requests

Requirements

  • J.D. or LL.M. and active membership in good standing with a U.S. state bar
  • At least five years of legal practice experience
  • Expertise in regulatory compliance, data privacy, cloud and SaaS transactions, and third-party risk management
  • Working knowledge of GLBA, FERPA, GDPR, and U.S. privacy laws
  • Strong interest in emerging regulations and frameworks, including the EU AI Act and DORA
  • Ability to coordinate multiple stakeholders, prioritize substantial workloads, and deliver under tight deadlines
  • Experience with B2B SaaS, cybersecurity, or technology companies is preferred
  • Professional privacy certification, such as CIPP/US or CIPP/E, is preferred
  • Experience using third-party risk management and regulatory filing platforms, including SAM.gov, is preferred

Benefits

  • Health, dental, and vision coverage
  • Flexible paid time off
  • Sick leave prorated according to the hire date
  • All U.S. federal holidays
  • Three paid volunteer days
  • Eligibility for an annual discretionary bonus for non-commissioned positions
  • Flexible spending and dependent care accounts
  • Employee assistance program, where applicable
  • Educational reimbursement
  • 401(k) with employer match or pension, where applicable
  • Pet insurance for U.S. employees
  • Parental leave for U.S. employees
  • Hybrid and remote work options

Related Jobs