Senior Legal, Privacy & Export Compliance Analyst
horizon3aiRemote (US,)Full Time2w ago
AISecuritySOCComplianceSaaSSalesFinanceLegalHROperationsSupportAnalyst
Job description
Senior Legal, Privacy & Export Compliance Analyst at horizon3ai.
About the role
This position involves managing operational workflows across legal, privacy, compliance, and export operations. You will handle critical processes that directly influence enterprise deals, customer confidence, and global operations. This is an execution-focused role, ideal for someone who enjoys building and scaling programs independently in a fast-growing environment.
Key facts
What you'll do
- Administer the e2Open export compliance platform and related global trade workflows.
- Conduct restricted and denied party screening and sanctions checks, resolving flags promptly.
- Assist with export classification, recordkeeping, and maintaining export documentation.
- Manage export controls, sanctions, and restricted-party diligence for customer, partner, and reseller onboarding.
- Ensure adherence to export control and sanctions regulations, including EAR and OFAC.
- Improve scalable export compliance procedures, documentation, training, and operational tracking.
- Support internal and external audits and regulatory inquiries related to export compliance.
- Administer Horizon3's global privacy operations program.
- Review and maintain Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), privacy notices, and subprocessor lists.
- Support operational privacy workflows, including AI governance documentation.
- Update customer-facing privacy resources like trust center content and FAQs.
- Maintain and refresh customer-facing compliance materials and documentation libraries.
- Coordinate the collection and delivery of compliance evidence for customer diligence, DDQs, RFPs/RFIs, and vendor risk requests.
- Support regulatory and certification assessments such as SOC 2 and ISO-style controls.
- Assist with customer-facing compliance and trust activities involving enterprise stakeholders.
- Maintain scalable compliance operations and documentation repositories for customer diligence and audit readiness.
- Support scalable workflows for privacy, compliance, and customer trust operations, including intake and request tracking.
Requirements
- 5+ years of experience in legal operations, compliance, privacy, export compliance, contract management, or paralegal roles.
- Experience supporting SaaS, cybersecurity, or technology companies.
- Familiarity with GDPR, CCPA/CPRA, DPAs, SCCs, and cross-border data transfer mechanisms.
- Knowledge of SOC 2, ISO 27001, or similar security/compliance frameworks.
- Experience with customer diligence, DDQs, and audit support processes.
- Hands-on experience with e2Open or similar export compliance and denied-party screening platforms.
- Working knowledge of U.S. export controls and sanctions regulations (EAR, OFAC).
- Experience supporting operational export compliance workflows for global SaaS or technology transactions.
- Strong organizational skills and attention to detail, comfortable with high-volume processes.
- Ability to manage multiple priorities independently in a fast-paced environment.
- Excellent written communication and operational documentation skills.
Nice to have
- Experience with CLM systems and legal workflow/operations platforms.
- Experience within an in-house legal department at a technology, SaaS, or high-growth company.
- Experience with trust-center workflows, compliance documentation repositories, ticketing/intake systems, and GRC platforms.
- Experience supporting customer-facing compliance programs, including security questionnaires and audits.
- Experience supporting enterprise customer contracting and compliance/diligence processes.
Skills & tools
- e2Open
- GDPR
- CCPA/CPRA
- SOC 2
- ISO 27001
- EAR
- OFAC
Practical notes
This role offers health, vision, and dental insurance for you and your family, a flexible vacation policy, and generous parental leave. The company supports remote work and encourages candidates to redact age-identifying information from their application materials without penalty.