Assistant General Counsel - AI, Privacy & Governance

Baseten • San Francisco, CA

7d • $225,000 - $275,000

About The Position

Baseten is AI inference infrastructure that runs customer models reliably and at scale. This position shapes how Baseten approaches AI law, privacy, and regulation. The role involves owning the regulatory spine, acting as the architect of the privacy program, and partnering with Security and Compliance for certifications. It also involves supporting Model Labs and partnership deals, as well as customer and Sales deals, with a primary focus on Baseten's regulatory program (AI law, privacy, export, and governance).

Requirements

• JD and active bar membership in good standing.
• 8+ years across some combination of AI/tech regulatory, privacy, export/trade controls, and compliance/governance work, with in-house time at a technology, cloud, or infrastructure company.
• Working command of data-protection frameworks (GDPR, CCPA) and the operational mechanics of a privacy program.
• Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001) and security/assurance regimes (SOC 2, ISO 27001).
• Demonstrated ability to operationalize a regulatory regime end to end (controls, documentation, testing, reporting) in genuine ambiguity.
• Strong cross-functional skills: ability to partner credibly with Security, Engineering, and Compliance and turn obligations into controls.
• Commercially grounded; comfortable supporting live deals and making measured, informed risk calls.
• Ability to learn, build, and master AI tooling and systems to self-serve and operate at breakneck speed.
• A desire to become a recognized thought leader in your field.

Nice To Haves

• Direct experience with BIS/EAR export controls, CFIUS, or trusted-supplier/country-of-origin programs.
• Experience standing up or scaling a privacy or compliance program from an early stage.
• Relevant certifications (CIPP/E, CIPM, IAPP AIGP, or comparable).
• Exposure to AI-specific contracting (model licensing, data provenance, training-data representations).
• Experience at an AI, ML, or developer-infrastructure company.

Responsibilities

• Own Baseten's legal and regulatory positioning under AI regulation (EU AI Act, U.S. state AI laws, NIST AI RMF, and emerging frameworks).
• Lead export and trade compliance, including BIS/EAR advanced-computing and semiconductor controls, end-use/end-user diligence, and sanctions screening as they apply to compute access and model distribution.
• Build and run the privacy program: GDPR/CCPA compliance, DPA and sub-processor framework, data-subject requests, cross-border transfer mechanics, and Baseten's posture as a processor.
• Own the governance and controls layer for certifications (SOC 2, ISO/IEC 42001, HIPAA-eligible configurations), partnering with Security and Compliance on policy lifecycle, controls testing, evidence, and audit/regulator readiness.
• Translate regulatory obligations into operational controls, documentation, and training for engineering, product, and GTM teams.
• Serve as legal partner to Security and GRC organizations on regulated-data handling, customer and auditor assurance, and risk-acceptance decisions.
• Support Model Labs and partnership agreements on AI-law, privacy, export, and IP-provenance terms; support customer and Sales deals on the same as needed.
• Advise the CLO and leadership on regulatory risk, monitor the evolving landscape, and recommend readiness plans for new or amended regimes.
• May assist on M&A and other strategic or one-off transactions as needed.

Benefits

• Competitive compensation, including meaningful equity.
• 100% coverage of medical, dental, and vision insurance for employee and dependents.
• Flexible PTO policy including company wide Winter Break (offices are closed from Christmas Eve to New Year's Day!).
• Paid parental leave.
• Fertility and family-building stipend through Carrot.
• Company-facilitated 401(k).
• Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed