Drimva

Rox

Senior Commercial Counsel

San Francisco · On-site · Senior · Full-time · Posted Oct 12, 2026

Experience
4 to 8 years of legal practice, including at least 2 years in-house at a B2B SaaS or enterprise software company or in a technology transactions practice serving them.
Education
JD

About the job

Serves as Rox’s first in-house lawyer, leading commercial contracting, privacy, communications compliance, and AI governance while advising product and engineering on legal requirements for enterprise AI products.

What you'll do

  • Own and negotiate commercial agreements, and build templates and playbooks for standard deals.
  • Run privacy, communications-compliance, and AI-governance programs; translate legal requirements into agreements, policies, and product requirements.
  • Advise product, engineering, security, and business teams on launches, integrations, vendors, and enterprise obligations.

What they ask for

  • JD and active membership in good standing with at least one US state bar.
  • 4 to 8 years of legal practice, including at least 2 years in-house at a B2B SaaS or enterprise software company or in a technology transactions practice serving them.
  • Experience negotiating complex MSAs, DPAs, and security addenda with Fortune 500 or Global 2000 legal and procurement teams.
  • Practical command of data privacy law in the US, EU, and UK; working knowledge of marketing and communications compliance and AI regulation.

Nice to have

  • California bar membership; experience with products handling customer data at scale or built on large language models; Canada privacy and communications-law knowledge; CIPP/E or CIPP/US.
  • Experience as a first or early legal hire; familiarity with ISO 27001, regulated industries, public sector, or customer-hosted deployments.

Tools

GDPR, UK GDPR, CCPA/CPRA, PIPEDA, CAN-SPAM, TCPA, EU AI Act, NIST AI RMF

AI focus

Own AI governance, including regulatory obligations, disclosure rules, model provider terms, and policies on training, data retention, output ownership, and indemnification; advise on AI product features and data flows.

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 5, 2026 (UTC)