Senior Legal, Privacy & Export Compliance

Get to Know Us Horizon3.ai http://Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. What You’ll Do We’re looking for a highly organized, execution-focused legal, privacy, compliance, and export compliance operations professional to lead operational workflows across Legal, Privacy, Compliance, and Export Operations. You will run high-volume, business-critical processes that directly impact enterprise deals, customer trust, and our ability to operate globally. You will work cross-functionally with Legal, InfoSec, GTM, Finance, Product, Engineering, HR, and Operations to help scale our legal and compliance infrastructure in a practical, business-enabling way. This is a highly operational role focused on execution, coordination, process ownership, and scalable compliance workflows rather than traditional legal practice. This role is ideal for someone who enjoys building and scaling programs in a fast-growing environment, is comfortable working independently with limited structure, and thrives wearing multiple hats across legal, privacy, compliance, and export operations. Export Compliance & Global Trade Operations - Support day-to-day administration and ongoing management of the e2Open export compliance platform and related global trade workflows. - Perform restricted and denied party screening and sanctions checks in accordance with U.S. EAR, OFAC and applicable international export control and trade requirements; escalate and resolve flags in a timely manner. - Assist with export classification, recordkeeping, and maintenance of export-related documentation. - Drive compliant customer, partner, reseller, and channel onboarding requirements by managing export controls, sanctions, and restricted-party diligence end-to-end. - Partner with Legal, Finance, Sales, Channel, and Operations to support compliant domestic and international transactions. - Help ensure compliance with applicable export control and sanctions regulations, including EAR, OFAC, and other relevant trade laws. - Maintain and improve scalable export compliance procedures, workflows, documentation, training materials, and operational tracking processes, including requests, approvals, escalations, investigations, and audit activities - Maintain records and documentation necessary to support audit readiness, regulatory inquiries, and internal compliance reviews - Assist with third-party due diligence and partner screening for international customers, channel partners, and vendors. - Support internal and external audits and regulatory inquiries relating to export compliance controls and documentation. Privacy & Data Protection Operations - Support administration of Horizon3.ai http://Horizon3.ai’s global privacy operations program. - Review, track, and maintain: - Data Processing Agreements (DPAs) - Standard Contractual Clauses (SCCs) and other data transfer mechanisms - Privacy notices and internal privacy documentation - Subprocessor lists and related documentation - Support operational privacy workflows, including maintenance of AI governance documentation and other data protection artifacts. - Help maintain and update customer-facing privacy resources (e.g., trust center content, FAQs, standard responses) to ensure they are accurate and aligned with our policies and certifications. Compliance, Audits & Customer Diligence - Maintain and refresh customer-facing compliance materials, including standard security and compliance responses, decks, and documentation libraries. - Coordinate collection, organization, and delivery of compliance evidence for: - Customer security and compliance diligence - Due diligence questionnaires (DDQs) and RFPs/RFIs - Vendor risk and onboarding requests - Regulatory and certification-related assessments (e.g., SOC 2, ISO-style controls). - Support customer-facing compliance and trust activities with enterprise procurement, security, privacy, and legal stakeholders. - Maintain scalable compliance operations and documentation repositories that support enterprise customer diligence, audit readiness, and reduced friction in sales and renewal cycles Operational Enablement - Support scalable workflows for privacy, compliance, and customer trust operations, including intake coordination, documentation management, and cross-functional request tracking. - Help improve operational processes that reduce customer diligence friction, accelerate enterprise transactions, and support audit readiness. - Success in this role means improving customer diligence response times, maintaining audit readiness, supporting scalable export compliance operations, and reducing operational friction across enterprise transactions and renewals. What You’ll Bring Required - 5+ years of experience in legal operations, compliance, privacy, export compliance, contract management, and/or paralegal roles. - Experience supporting SaaS, cybersecurity, or technology companies. - Working familiarity with: - GDPR and core global privacy principles - CCPA/CPRA - DPAs, SCCs, and cross-border data transfer mechanisms - SOC 2, ISO 27001,or similar security/compliance frameworks - Customer diligence, DDQs, and audit support processes - Hands-on experience with e2Open or similar export compliance and denied-party screening platforms. - Working knowledge of U.S. export controls and sanctions regulations, including EAR, OFAC, restricted-party screening, and international trade compliance requirements. - Experience supporting operational export compliance workflows for global SaaS, cybersecurity, or technology transactions - Strong organizational skills, exceptional attention to detail, and comfort owning repeatable, high-volume processes. - Proven ability to manage multiple priorities independently in a fast-paced environment. - Experience operating in a fast-paced, high-volume environment with competing business priorities and rapid turnaround expectations. - Excellent written communication and operational documentation skills. Preferred - Experience with CLM systems and legal workflow/operations platforms. - Experience working within an in-house legal department at a technology, SaaS, cybersecurity, or other high-growth company. - Experience working with trust-center workflows, compliance documentation repositories, ticketing/intake systems, and GRC platforms - Experience supporting customer-facing compliance programs, including security questionnaires, audits, and trust-related collateral. - Experience supporting enterprise customer contracting and compliance/diligence processes Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: - Base salary range: $153,000 - $162,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. - Additional compensation: All full-time roles are eligible for an equity package in the form of stock options. Perks of Horizon3.ai http://Horizon3.ai - Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. - Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. - Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. - Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence. - Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, hair length or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice. Application Note In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.