Commercial Counsel

SecurityScorecard•New York, NY

11h

About The Position

SecurityScorecard is transitioning from the global leader in cybersecurity ratings to the pioneer of Agentic TPRM — a future where autonomous, AI-driven workflows transform how organizations understand and manage third-party risk at scale. As we accelerate this transformation, Team Legal plays a mission-critical role in enabling the commercial velocity that fuels it. We are seeking a sophisticated, high-caliber Commercial Counsel to join the team and serve as a trusted strategic partner to our go-to-market and technology organizations. This is not a paper-shuffling contract role — we want a lawyer who brings genuine business judgment, commercial creativity, and a command of the legal landscape surrounding AI, cybersecurity, and SaaS. You will be embedded deeply in the business, counseling across a wide range of complex commercial, regulatory, and strategic issues, and you will be expected to build and modernize the legal infrastructure that supports a company moving at startup speed with enterprise stakes. Reporting to the General Counsel, this role will collaborate closely with all members of Team Legal as well as Sales, Finance, Partnerships, Product, and Privacy. You will be a core driver of legal operational excellence and a steward of the company's commitment to agentic, AI-native workflows — including the automation and intelligent management of our global contracting processes.

Requirements

JD from an accredited law school; licensed to practice law in at least one U.S. state.
5–8 years of commercial legal experience, with a meaningful combination of law firm and in-house roles. Prior in-house experience at a SaaS, cybersecurity, or technology company strongly preferred.
Demonstrated mastery of enterprise technology and SaaS contracting, including deep familiarity with data processing agreements, IP ownership and licensing provisions, limitation of liability structures, and SLA frameworks.
Proven ability to manage high deal volumes with speed and quality, building trust with Sales and Go-To-Market teams as a true enabler.
Excellent written and verbal communication skills, with the ability to explain complex legal concepts clearly to non-lawyers and executive stakeholders.
Sound judgment and intellectual honesty — you know when to hold firm and when to be pragmatic, and you communicate your reasoning clearly.
Comfort operating in ambiguity, managing competing priorities, and making quality decisions under time pressure.
Genuine enthusiasm for AI, automation, and legal technology as tools for transforming how legal work gets done.

Nice To Haves

Experience advising on AI product features, machine learning data rights, or the commercialization of AI-powered offerings.
Background in or strong familiarity with cybersecurity, third-party risk management, or the regulatory frameworks governing them (e.g., NIST, ISO 27001, NIS2, DORA).
Experience implementing or administering contract lifecycle management (CLM) platforms or other legal tech tools.
Familiarity with global data protection regimes (GDPR, CCPA/CPRA) and how they intersect with enterprise commercial agreements.

Responsibilities

Review, draft, and negotiate a broad range of commercial agreements, including enterprise SaaS agreements, data processing addenda, partnership and reseller agreements, professional services agreements, technology vendor contracts, and NDAs — with a strong emphasis on high-value and high-complexity enterprise deals.
Serve as the primary legal point of contact for the Sales organization, providing responsive, practical guidance that enables deal velocity without sacrificing legal integrity.
Counsel the business on legal issues arising from SSC's AI-powered and agentic product capabilities, including issues related to data use, model liability, intellectual property, and evolving regulatory requirements.
Develop and maintain contract playbooks, standard forms, fallback positions, and internal approval frameworks to create consistency, speed, and scalability across commercial contracting.
Lead and advance Team Legal's automation and AI adoption efforts — evaluating and implementing contract lifecycle management tools, AI-assisted review platforms, and other legal tech solutions aligned with the company's broader Agentic TPRM roadmap.
Work with Team Legal on cross-functional legal matters including data privacy (GDPR, CCPA, and emerging frameworks), intellectual property, employment law, regulatory compliance, and corporate governance.
Track and report on key legal metrics (cycle time, deal volume, escalation patterns, risk exposure) to support data-driven decision-making within Team Legal and with executive stakeholders.
Contribute to the ongoing development of Team Legal's operational processes, ensuring the function scales effectively as the business grows.