You'll be Gamma's second lawyer, reporting to the Head of Legal, with a mandate to own the commercial and privacy work that comes with scaling an AI-powered platform to enterprise. This is a high-autonomy role: you'll run enterprise deal cycles end to end, help build out our privacy compliance program, and advise cross-functional teams on everything from data handling to AI regulation.
Gamma has a strong in-office culture and works in person 4–5 days per week in San Francisco. We love working together to stay creative and connected, with flexibility to work from home when focus matters most.
Responsibilities
- Draft, review, and negotiate the full range of commercial agreements: customer MSAs, order forms, DPAs, vendor contracts, NDAs, and partnership deals on both the sell side and buy side
- Run enterprise deal cycles alongside the GTM, including negotiations with sophisticated legal teams at large counterparties
- Evolve Gamma’s data privacy compliance program
- Advise Product and Engineering on privacy-by-design, AI compliance (including EU AI Act readiness), and data handling practices
- Help build scalable legal processes, playbooks, and templates to support Gamma’s growing B2B motion
Requirements
- JD and active bar membership (California preferred), with 4–7 years of legal experience including meaningful time at a major law firm and at least 2–3 years in-house at a SaaS or technology company
- Deep experience negotiating SaaS commercial agreements with enterprise customers
- Working knowledge of GDPR, CCPA, and data protection frameworks sufficient to handle DPA negotiations and day-to-day privacy operations without close supervision, with familiarity with AI/ML regulatory developments (EU AI Act, state-level AI legislation) and the ability to translate requirements into practical product guidance
- Comfort operating across a wide surface area with limited resources. You don't need a team of specialists behind you to move work forward
- Sharp judgment on when to protect and when to clear the path, with clear, direct communication that works whether you're explaining a redline to a sales rep or a privacy obligation to an engineer
- Experience at a high-growth startup navigating the consumer-to-enterprise transition, hands-on experience with international data transfers and multi-jurisdictional privacy compliance, or exposure to security compliance frameworks like SOC 2 in a vendor-facing context (Nice to have)
Compensation
The base salary for this full-time position, which spans multiple internal levels depending on qualifications, ranges between $180K – $260K plus benefits & equity.
XML job scraping automation by YubHub
