Product & Privacy Counsel

About Teleport Don't wait for the future of infrastructure. Be part of it. Teleport is the AI Infrastructure Identity Company. We're solving one of the hardest problems in security: giving every human, machine, workload, and AI agent a cryptographically secured identity, improving engineering velocity while maintaining security. We make trusted computing simple. This gives you the freedom, power, and autonomy to build and innovate with confidence. Remote-first and globally distributed, we work with companies like Nasdaq, IBM, and Elastic to secure infrastructure for an AI world. About the Role: This role reports to the VP of Legal and blends traditional product counseling with deep expertise in AI governance, privacy frameworks, and emerging regulatory regimes. You will embed directly into the product development lifecycle, advising on AI-enabled features, and data governance decisions. You will be a foundational legal hire, partnering closely with engineering, product, and go-to-market teams to build a privacy and product legal program from the ground up while also supporting commercial transactions. You will help guide Teleport's AI governance strategy, monitor evolving legal and privacy standards, and design controls that allow the business to innovate responsibly. What You'll Do: As Product Counsel: - Serve as legal advisor to Product and Engineering, providing timely guidance during product development cycles. - Help shape and implement Teleport's AI governance framework, including use-case risk evaluation standards, and documentation practices. - Contribute to cross-functional workstreams to develop and implement internal, scalable processes and policies for responsible AI use, working closely with engineering, security, and product leadership. - Advise on AI-related intellectual property matters, including licensing and data usage. - Advise on open source licensing models and the legal considerations relevant to open source software development and distribution. As Privacy Counsel: - Monitor and interpret evolving AI regulations and global privacy frameworks, including the EU AI Act, GDPR, and CCPA/CPRA, translating requirements into clear, actionable guidance for technical and business stakeholders. - Conduct privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and AI risk analyses for new features and product lines. - Support data mapping, data subject requests, and data governance improvements across the product portfolio. - Draft, review, and negotiate data processing agreements (DPAs) and AI-specific addendums, serving as the escalation point for the commercial legal team on privacy and AI issues. - Perform due diligence on vendor compliance, and negotiate contracts to include robust data protection clauses. - Partner with Security on incident response and regulatory inquiries, including breach assessment and stakeholder notifications. - Develop internal playbooks, training programs, and policies, including privacy policies, terms of service, and DPAs, to build a culture of compliance and proactively address emerging risks. - Partner with security and engineering teams to support compliance certifications such as SOC 2, ISO 27001 and 27701, HIPAA and PCI from a privacy and legal perspective. What We're Looking For: - Admitted to the California Bar or eligible for the Registered In-House Counsel exception, and in good standing. - 8+ years of legal experience, including 4+ years of product legal experience at a software company. - Significant experience counseling product and engineering teams through the full product development lifecycle, from conception to launch, and advising on the legal and regulatory aspects of software product development. - Strong understanding of open source licensing, SaaS business practices, and relevant global regulatory requirements. - Able to quickly form and convincingly communicate a point of view under time pressure and with imperfect information. - General