Senior Legal, Privacy & Export Compliance

Get to Know Us Horizon3.ai http://Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results. What You’ll Do We’re looking for a highly organized, execution-focused legal, privacy, compliance, and export compliance operations professional to lead operational workflows across Legal, Privacy, Compliance, and Export Operations. You will run high-volume, business-critical processes that directly impact enterprise deals, customer trust, and our ability to operate globally. You will work cross-functionally with Legal, InfoSec, GTM, Finance, Product, Engineering, HR, and Operations to help scale our legal and compliance infrastructure in a practical, business-enabling way. This is a highly operational role focused on execution, coordination, process ownership, and scalable compliance workflows rather than traditional legal practice. This role is ideal for someone who enjoys building and scaling programs in a fast-growing environment, is comfortable working independently with limited structure, and thrives wearing multiple hats across legal, privacy, compliance, and export operations. Export Compliance & Global Trade Operations - Support day-to-day administration and ongoing management of the e2Open export compliance platform and related global trade workflows. - Perform restricted and denied party screening and sanctions checks in accordance with U.S. EAR, OFAC and applicable international export control and trade requirements; escalate and resolve flags in a timely manner. - Assist with export classification, recordkeeping, and maintenance of export-related documentation. - Drive compliant customer, partner, reseller, and channel onboarding requirements by managing export controls, sanctions, and restricted-party diligence end-to-end. - Partner with Legal, Finance, Sales, Channel, and Operations to support compliant domestic and international transactions. - Help ensure compliance with applicable export control and sanctions regulations, including EAR, OFAC, and other relevant trade laws. - Maintain and improve scalable export compliance procedures, workflows, documentation, training materials, and operational tracking processes, including requests, approvals, escalations, investigations, and audit activities - Maintain records and documentation necessary to support audit readiness, regulatory inquiries, and internal compliance reviews - Assist with third-party due diligence and partner screening for international customers, channel partners, and vendors. - Support internal and external audits and regulatory inquiries relating to export compliance controls and documentation. Privacy & Data Protection Operations - Support administration of Horizon3.ai http://Horizon3.ai’s global privacy operations program. - Review, track, and maintain: - Data Processing Agreements (DPAs) - Standard Contractual Clauses (SCCs) and other data transfer mechanisms - Privacy notices and internal privacy documentation - Subprocessor lists and related documentation - Support operational privacy workflows, including maintenance of AI governance documentation and other data protection artifacts. - Help maintain and update customer-facing privacy resources (e.g., trust center content, FAQs, standard responses) to ensure they are accurate and aligned with our policies and certifications. Compliance, Audits & Customer Diligence - Maintain and refresh customer-facing compliance materials, including standard security and compliance responses, decks, and documentation libraries. - Coordinate collection, organization, and delivery of compliance evidence for: - Customer security and compliance diligence - Due diligence questionnaires (DDQs) and RFPs/RFIs - Vendor risk and onboarding requests - Regulatory and certification-rel