Full Job Description
Zello powers instant, push-to-talk communication for frontline workers, and every enterprise deal we sign rests on a contract someone reviewed carefully. This role owns customer and vendor contracting end-to-end - NDAs, MSAs, DPAs, AI data-processing addendums, and security exhibits - with outside counsel reserved for what is genuinely novel. Embedded in the role is support for Zello's governance, risk, and compliance program, which rewards exactly the traits a strong contracts manager already has: structure, discipline, and a clean paper trail. No GRC background required; we will teach it.
What you'll do
• Own the customer contract lifecycle: review, redline, and negotiate NDAs, MSAs, DPAs, AI data-processing addendums, BAAs, amendments, and security exhibits from first draft to signature.
• Decide when an issue is genuinely novel enough to loop in outside counsel - and handle everything else yourself.
• Build the contracting infrastructure: playbooks, fallback positions, template libraries, and the escalation bar that keeps routine deals out of anyone else's inbox.
• Own the vendor lifecycle: intake, due diligence, tiering, approval, renewal, and termination.
• Run data subject requests in support of GDPR) and subpoena/legal-request intake end-to-end,and track the contractual notification commitments tied to Zello products and AI data changes to support compliance with respective requirements.
• Support the administration of Zello's compliance stack - Drata, KnowBe4 - and run the policy lifecycle (drafting, review cadence, attestation) and periodic access reviews.
• Use AI on the repetitive parts of this work - first-pass review, questionnaire drafting, clause comparison, obligation tracking - and keep improving how you use it.
Who you are
• You have 3+ years owning commercial contracts in-house, and you've independently redlined and closed NDAs, DPAs, and MSAs without an attorney walking you through them.
• You are organized to a degree other people find slightly excessive. Every open redline, obligation, and renewal date is tracked, and nothing falls off.
• You are at home in the detail. A DPA with three conflicting definitions of "Personal Data" is a puzzle you enjoy, not a chore you dread.
• Law was a real consideration for you at some point - you may have prepped for the LSAT, worked shoulder-to-shoulder with attorneys, or come close to applying - and you concluded the operating side of legal is where you do your best work.
• You are already using AI in your work, or you are impatient to. You don't need to know how the models work; you need to believe the first draft should come from a machine and your judgment should be spent on what matters.
• GRC is new to you and that reads as interesting rather than intimidating. You've noticed it runs on the same things contracting does - structure, evidence, follow-through - and you want the surface area.
• You spot a manual or error-prone process before anyone points it out, and you fix it - building a clause library instead of redlining from scratch every time.
• You communicate clearly and concisely with Sales, Customer Success, Engineering, and outside counsel, without over-explaining or leaving people guessing.
This role is not
• An attorney role - no JD or bar admission is required or expected. Outside counsel handles the genuinely novel; you handle the rest.
• A management role - there are no direct reports.
• A GRC or security engineering role - you own the compliance program's operational rigor, not the underlying technical controls (IAM, SIEM, pen testing), and you do not need a GRC background walking in.
• A redline-only role - contracting is the core, but vendor management and the compliance program's operational cadence come with it.
We hire for potential, passion for our mission, and a knack for solving difficult problems over checking every qualification box. We have competitive pay, equity with significant upside, and intentionally design our benefits to encourage healthy and well-balanced employees, flexible schedules and time off. We even offer a sabbatical after every five years of service so you're able to pursue and enjoy what matters most to you. And of course, we wouldn't be a technology company without a ping-pong table and free snacks in our break room. Join us!