Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Commercial Counsel role.

Rezi rewrites your resume against Rox Data Corp's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Commercial Counsel posting at Rox Data Corp — free, in seconds.

About the Role

As Senior Commercial Counsel at Rox, you will be our first in-house lawyer, addressing complex legal questions at the intersection of enterprise contracting, data privacy, and AI. You will work with outside counsel on unsettled legal matters and translate solutions into scalable agreements, policies, and product requirements. This role is ideal for someone energized by challenging questions and the fast pace of an early-stage company selling to large enterprises.

Responsibilities

Own commercial contracting end to end: MSAs, order forms, SOWs, DPAs, security addenda, NDAs and pilot agreements, from first draft through negotiation with Global 2000 legal and procurement teams to signature
Build the templates, playbooks and fallback positions that let Sales and Growth close standard deals without a lawyer in the room, and route the exceptions that need one to you
Set and defend Rox’s data privacy positions across GDPR and UK GDPR, CCPA/CPRA and the other US state laws, PIPEDA and APAC regimes: controller, processor and subprocessor roles across our product, our data and inference providers and customer integrations; cross-border transfers; retention; DPIAs. Run the subprocessor management program across enterprise DPAs with differing notice and consent terms
Own communications compliance for a product that outbounds on behalf of sellers: CAN-SPAM, TCPA, CASL, ePrivacy and PECR, state telemarketing and call-recording laws, do-not-call, consent and suppression. Define what the product enforces by design and what customers warrant, and put both into our agreements and our features
Own AI governance: EU AI Act obligations, US state AI laws, bot and automated-communication disclosure rules, FTC guidance on AI claims, and model provider terms. Work out, with outside counsel where the law is unsettled, what Rox commits to on training, data retention, output ownership and indemnification, and keep the AI Use Policy and customer-facing AI documentation current
Counsel product and engineering on features and integrations before launch: data flows for the Outbound Agent, Sequences and the dialer, agentic web research, call recording and transcription, CRM and communication-platform integrations and their third-party terms, and customer-hosted (in-VPC) deployments with their shared-responsibility model
Negotiate inbound agreements with data, inference, telephony and cloud vendors, and structure partner, reseller and cloud marketplace agreements as the partner ecosystem grows
Partner with Security on SOC 2, ISO 27001 and NIST alignment, security questionnaires, incident response and breach notification obligations
Coordinate outside counsel on corporate matters (fundraising diligence, IP and trademark, open source compliance) and train the go-to-market and forward deployed engineering teams on contracting and compliance guardrails

Requirements

JD and active membership in good standing with at least one US state bar; California preferred
4 to 8 years of legal practice, including at least 2 years in-house at a B2B SaaS or enterprise software company or in a technology transactions practice serving them
Experience with products that handle customer data at scale or build on large language models is a strong plus
Has taken large, complex, heavily negotiated MSAs, DPAs and security addenda with Fortune 500 or Global 2000 legal and procurement teams from first redline to signature, and knows when to hold a position and when to trade it
Practical command of data privacy law in the US (CCPA/CPRA and other state statutes) and the EU and UK (GDPR, UK GDPR, ePrivacy), including cross-border transfer mechanisms and controller/processor analysis
Canada (PIPEDA, CASL) and CIPP/E or CIPP/US a plus
Working knowledge of marketing and communications compliance: CAN-SPAM, TCPA and state telemarketing and call-recording laws, and the operating practices (consent, suppression, do-not-call, disclosure) that keep automated outreach compliant
CASL and PECR a plus
Working knowledge of AI regulation and standards (EU AI Act, US state AI laws, NIST AI RMF) and a solid understanding of how the technology works: inference, context windows, retrieval, agents and tool use, and what each means for where data goes and who is responsible for it
Comfortable reading architecture diagrams, data flow maps and API documentation, and able to turn them into accurate contractual commitments and privacy disclosures
Has built or materially improved contract templates, playbooks or CLM tooling
Experience as a first or early legal hire a plus
Familiarity with SOC 2 and enterprise security questionnaires
ISO 27001, regulated industries, public sector or customer-hosted deployments a plus
Clear writer and direct communicator who gives answers, takes positions, and is comfortable making calls with incomplete information

Skills

Enterprise contracting
Data privacy law
AI governance
Commercial contracting
GDPR
UK GDPR
CCPA/CPRA
PIPEDA
CAN-SPAM
TCPA
CASL
ePrivacy
PECR
EU AI Act
NIST AI RMF
Contract negotiation
Template building
Playbook development
Communication compliance
AI regulation
Security questionnaires

Location

San Francisco

Work Type

Onsite

Experience Level

4 to 8 years of legal practice
At least 2 years in-house at a B2B SaaS or enterprise software company or in a technology transactions practice serving them
First or early legal hire experience a plus

Education Level

JD and active membership in good standing with at least one US state bar

Benefits

Competitive pay with considerable equity upside
Medical, dental, and vision, including 100% company-paid plans for you and eligible dependents
Company-paid life & AD&D, plus short- and long-term disability
401(k) with automatic enrollment
Unlimited PTO, plus paid sick leave, company holidays, and bereavement
Up to 20 weeks of paid parental leave at 100% pay (birth, adoption, or foster)
Wellness stipend: $375/quarter
Learning stipend: up to $2,000/year
Internet & cell phone stipend: $25/month
Mental health support, virtual care, and care navigation
Fertility & family-building support, plus backup care membership
Pre-tax commuter benefits (transit & parking)
SF HQ: daily catered breakfast & lunch, meal allowances, and rideshare support when commuting to the office

About the Company

Rox believes in empowering people to do their best work by supercharging sellers with autonomous revenue agents.
Their platform enables sellers to focus on selling by automating manual tasks, aiming to 10x customer work.
They are reimagining the revenue stack by building the world’s first revenue operating system.
Rox powers Global 2000 leaders in banking, hardware, construction, and sovereign AI, serving companies like Ramp and Cognition.
The team is world-class, with members who have founded and exited companies, held senior positions at major tech firms, and achieved academic excellence.
Rox is backed by prominent investors including Sequoia, General Catalyst, Google Ventures, Elad Gil, and Chris Ré.