Compliance & Regulatory Counsel (Remote)

About the role

ExtraHop, a SaaS company focused on network visibility and threat detection, is hiring a Compliance and Regulatory Counsel on a remote basis. The role advises on the laws and regulations affecting ExtraHop as a SaaS provider and on the frameworks governing its enterprise customers, and supports the corporate and sales compliance function through accurate filings, internal databases, project roadmaps and compliance programs. It works with Information Security, Privacy, IT, HR, Finance, Product and other teams, and suits a junior- to mid-level attorney with at least 5 years of experience.

Key responsibilities

• Research and advise on global regulatory and compliance frameworks, and guide responses to security questionnaires, TPRM assessments, RFIs, RFPs and customer due diligence requests.
• Draft and update Data Privacy Agreements (DPAs) and standard contractual clauses (SCCs), and support AI governance and privacy (GDPR/CCPA) risks.
• Coordinate corporate governance, including annual employment/EE compliance training, global ESG data collection and export/hardware compliance reporting.
• Serve as legal contact for independent audits such as SOC 2, helping with readiness, documentation and certifications.
• Maintain knowledge bases, response libraries and templates, and support the annual corporate insurance review.
• Provide ad hoc support on commercial litigation, including document holds and discovery requests.

Required profile

• J.D. or LL.M. with active US state bar membership in good standing.
• 5+ years of legal practice with expertise in regulatory compliance, data privacy, cloud/SaaS transactions and third-party risk management.
• Working knowledge of tech and privacy regulations (e.g., GLBA, FERPA, GDPR) and interest in emerging frameworks such as the EU AI Act and DORA.
• Proven ability to manage multi-stakeholder workflows and high-volume deliverables under tight deadlines.

Preferred

• Experience supporting B2B SaaS, cybersecurity or technology organizations.
• Privacy certification (e.g., CIPP/US or CIPP/E).
• Experience with TPRM platforms and regulatory filing platforms such as SAM.gov.

What we offer

• Salary of $180,000 - $200,000 per year, with eligibility for an annual discretionary bonus and stock option grants.
• Medical, dental and vision coverage effective day 1, 401(k) with employer match, flexible PTO, parental leave and educational reimbursement.
• Hybrid and remote work model.