Compliance & Regulatory Counsel

At ExtraHop, we’re on a mission to protect and empower the connected enterprise. We reveal what is happening in the very infrastructure that sustains businesses, lives, and communities, and ensure the integrity of networks, data, systems, and processes. Organizations rely on ExtraHop to provide visibility into the cyber threats, vulnerabilities, and network performance issues that evade their existing security and IT tools. With this insight, organizations can investigate smarter, stop threats faster, and keep operations running.

Our mission is fueled by a profound social and moral responsibility to be the best at what we do, ensuring a secure world where everyone can thrive. If this sounds like a place you’d like to spend the next chapter of your career, we’d love to hear from you.

Position Summary

The Compliance and Regulatory Counsel will act as a key legal partner to deliver and scale critical legal support to a growing global hi-tech SaaS company serving customers that include multi-national enterprises and public sector entities. This role will support the compliance and regulatory function at ExtraHop, advising on laws and regulations directly impacting our business as a SaaS provider, as well as the frameworks governing our enterprise customers. This role supports the corporate and sales compliance function by ensuring accurate and timely filings of various business and regulatory registrations for all jurisdictions in which ExtraHop operates, maintaining the internal database of such filings, staying ahead of legal and regulatory changes and updates and developing internal project roadmaps to ensure timely compliance, and administering compliance programs across multiple legal and risk frameworks.

This role partners with Information Security, Privacy, IT, HR, Finance, Product, and other subject matter experts to develop best practices to understand and advise the business on the legal and regulatory risk technical, security, privacy, and operational information into clear, customer-facing responses.

This is an excellent opportunity for a junior- to mid-level attorney with at least 5 years of experience to gain deep, cross-functional exposure to international technology regulations, product/hardware compliance, and cutting-edge AI and privacy governance under the supervision of the Deputy General Counsel and senior legal leadership.

The ideal candidate combines strong project and stakeholder management skills with a working knowledge of cybersecurity, privacy, compliance frameworks, and enterprise SaaS environments. This role requires the ability to manage competing priorities, exercise sound judgment on complex requests, identify appropriate resources, and continuously improve the processes, tools, and knowledge resources that support the sales organization.

Key Responsibilities

Regulatory Guidance & Cross-Functional Partnership

• Research and advise on complex global regulatory and compliance frameworks affecting ExtraHop as a B2B SaaS provider to enterprise clients.

• Guide responses for security questionnaires, TPRM assessments, RFIs, RFPs, and high-priority customer due diligence requests.

• Translate complex technical, security, and legal information into clear, customer-facing documentation.

Data Privacy & AI Governance

• Partner closely with Sales, Finance, Procurement, and InfoSec teams to manage regulatory, privacy (GDPR/CCPA), and AI data protection risks.

• Draft and update critical data privacy agreements (DPAs) and standard contractual clauses (SCCs).

• Support AI Governance initiatives to ensure ethical and legally sound product deployment.

• Coordinate and execute corporate governance programs, including facilitating annual Employment/EE compliance training and collecting data for global ESG annual reporting.

• Serve as a legal stakeholder for independent audits, assisting with readiness and documentation gathering for annual SOC 2 audits, supporting the preparation and distri