Senior Legal & Compliance Counsel for FaceUp 💙
About FaceUp:
FaceUp is a B2B SaaS whistleblowing and compliance platform headquartered in Prague, with a US entity and customers primarily in Europe, the United States, and the Middle East. Since 2017, we've been building trust and transparency in organizations worldwide - from schools tackling bullying to big companies and public institutions strengthening compliance and ethical culture. We serve compliance managers, HR leaders, and ethics & compliance teams who need a trusted reporting channel and a workflow to manage investigations. Today, our B2B SaaS platform serves 3,500+ organizations across 70 countries.
About the role:
We're looking for an in-house Senior Legal & Compliance Counsel - a hybrid role that combines hands-on legal work with compliance & ethics expertise.
On the compliance side, you'll help us build ethics & compliance domain knowledge across the company and represent us credibly in front of customers and partners. The work spans education, customer-facing support, content review, regulatory monitoring, and an internal gap analysis.
On the legal side, you'll own commercial and corporate legal topics - sitting at the negotiating table on commercial deals, acting as legal lead on tenders / RFPs and contracts negotiations, and manage our ISO 27001 and SOC 2 programs.
It's a strategic role and a rare chance to work the full multi-jurisdictional puzzle (EU, US, UK, Middle East) with visibility across the whole company - your voice will carry across product, GTM, and leadership.
This isn't a traditional in-house compliance officer role at a regulated business. We aren't a bank or an EMI, so we don't need someone to write internal compliance policies. We need a business advisor - someone who can apply compliance & ethics expertise across our product & GTM teams, in service of the customer’s compliance teams who buy from us.
The challenges that await you:
📝 Commercial legal support
You will review and negotiate customer redlines on Order Forms, MSAs / Terms of Service, and NDAs mostly across US, UK, EU and Middle East customers.
You'll advise the GTM team on commercial points; maintain our standard contract templates so they stay current and market-aligned; own the legal review on strategic deals; and draft addenda and tailored language for non-standard requirements.
🔒 Data protection, privacy & DPIAs
You will lead DPA negotiations and respond to customer privacy questionnaires across GDPR, UK GDPR, UAE and Saudi PDPL, and US state privacy laws.
You'll run Data Protection Impact Assessments for new features and integrations, and advise internal teams on the controller/processor split, lawful basis, international data transfers, and subprocessor management.
📋 RFPs & tenders
You will act as legal lead on tenders and RFPs - reviewing T&Cs, proposing acceptable redlines, completing vendor onboarding forms, and pushing back on customer security and risk questionnaires when needed.
You'll own our Trust Center / questionnaire automation platform and grow the answer library to speed up future responses, coordinating with Sales, CS, and Engineering to meet tight deadlines.
🏢 Internal legal & corporate operations
You will draft and review internal contracts (employment, contractors, partners, vendors), advise on our cross-border setup (CZ s.r.o. and US Delaware C-Corp) on commercial and contractual questions, and support corporate governance, insurance, and liability topics.
🎓 Compliance & ethics enablement
You will design and deliver internal compliance & ethics trainings that take a non-expert audience from compliance fundamentals to the specific areas FaceUp operates in (whistleblowing, investigations, disclosures, policy management).
Build and maintain a working view of the regulatory landscape across our key markets (US, EU, UAE), so the company can react to changes and prep narratives ahead of new laws. We want to know from you where the opportunities are, and where our gaps are.
As the in-house compliance expert, you will partner with Product team on what we build next, so FaceUp keeps evolving into the platform compliance teams actually want to use.
You will also be a customer-facing voice: joining prospect, customer, and partner calls as a subject-matter expert to add credibility, and answer compliance questions; and reviewing marketing materials to make sure our claims hold up.
✅ Certifications & internal audit
You will own FaceUp's ISO 27001 certification and lead our SOC 2 process - maintaining controls and audit evidence in Vanta in cooperation with the COO and CTO, and running the annual internal audit.
We would like to see you apply if:
You are a qualified lawyer with 4+ years of experience in international SaaS, B2B tech, or a law-firm tech practice.
You have a strong working knowledge of GDPR and EU and US commercial contract law. Familiarity with UK GDPR, UAE, and KSA data protection regimes is a strong plus. A multi-jurisdictional perspective is important in this role.
You have hands-on experience negotiating SaaS contracts (MSA, Order Form, DPA, NDA).
You bring domain knowledge in ethics & compliance - ideally in whistleblowing, case management, disclosure management, or policy management.
You have hands-on experience with ISO 27001 and SOC 2 (controls, audit evidence, SoA) and with DPIA methodology.
You have excellent written and spoken business Czech and English.
You can translate legal concepts into plain language
You have a commercial mindset - you know when to push back, when to accept, and when to escalate.
You're comfortable working autonomously in a fast-paced startup, juggling many parallel deals and stakeholders, and you're willing to work with imperfect information.
You have experience with Trust Center / GRC platforms (Vanta or similar).
Why you'll love it here:
Genuinely meaningful product - We help organizations protect whistleblowers, run investigations, and build ethical cultures. Your work directly supports that mission.
Build the product you'd otherwise be buying - Most legal & compliance professionals are users of tools like FaceUp. Here, you sit on the builder's side - contributing with your ethics & compliance domain knowledge directly into FaceUp's product.
Real ownership, not a slice of it - Instead of working on many clients at a law firm, you'll go deep on one company and shape how the whole organization handles legal and compliance.
International by default - We don't operate in one jurisdiction. Our customers are across the EU, US, UK, and the Middle East, and you'll work in the multi-jurisdictional environment every week.
Flexibility - remote friendly setup, unlimited PTO, paid sick leave.
Strong team culture - join motivated, values-driven colleagues who believe in what they’re building.
Learning and growth - We invest in your growth through training, conferences, and tools that help you level up.
How we hire:
We like to keep things straightforward and transparent:
Apply in English with your CV and a short note on why this role feels like a good fit for you.
Intro call - a relaxed chat about your expectations and experience.
Further interviews with the COO and leadership to make sure it's a match for both FaceUp and you.
A practical case study based on a real scenario - your chance to show us how you work and to see the kind of work you'd actually be doing.
We are looking forward to hearing from you! ☺️