Legal & Compliance Associate

The role
In this role, you will work closely with internal teams and external stakeholders to ensure the company maintains strong compliance standards while supporting customer contracts, security audits, investor due diligence, and operational legal processes.
Your Mission
We are looking for a detail-oriented and proactive Legal & Compliance Associate to support our global legal, compliance, and audit operations. In this role, you will work closely with internal teams and external stakeholders to ensure the company maintains strong compliance standards while supporting customer contracts, security audits, investor due diligence, and operational legal processes. You will work directly with the CFO on customer-paper MSAs, security audits, investor due diligence, and recurring legal operations - with significant ownership and a clear path to expanded responsibility.
How You'll Make an Impact
1. Compliance & Audit Operations
- Support and coordinate SOC2 and ISO 27001 audit activities across internal teams and external auditors.
- Work closely with DevOps and internal teams to gather audit evidence, align technical controls with compliance requirements, and ensure timely submissions.
- Support the development and standardization of internal controls, policies, and compliance processes.
- Review audit evidence and internal documentation to identify potential compliance gaps or risks, escalating issues when necessary.
- Conduct an annual risk survey of the business to identify potential new risks for management.
2. Strategic Support (Funding & M&A)
- Coordinate compliance and legal inputs for investor due diligence during funding rounds, including organizing data rooms and responding to standard due diligence inquiries from investors.
- Act as a coordination point for external auditors and stakeholders during M&A and due diligence activities.
3. Governance & Compliance Tracking
- Maintain the company's compliance calendar, ensuring policy reviews, recurring commitments, audits, and follow-ups are completed on time.
- Track ongoing compliance obligations and proactively drive cross-functional follow-ups to completion.
- Escalate strategic legal or compliance risks to the Manager for review and resolution.
4. Customer Contract Review & Redlining
- Conduct first-pass review of customer Master Service Agreements, framework agreements, vendor agreements, and amendments against Creative Force's standard SaaS Agreement and standard contractual positions.
- Produce structured deviation analyses identifying where customer paper departs from CF standard terms on liability caps, IP ownership, indemnification, suspension rights, payment terms, SLA, governing law, and assignment.
- Classify risks (must-protect / negotiate / acceptable) and prepare concrete redline language with rationale for each material change, using tracked changes in Word.
- Draft counter-proposals and negotiation talking points; coordinate internal feedback from commercial, security, and finance stakeholders.
- Escalate strategic risks (uncapped carve-outs, IP transfer, change-of-control, unusual termination rights) to the CFO with a clear recommendation.
- Maintain and improve CF's contract playbook, standard fallback positions, and clause library based on patterns observed across customer negotiations.
- Prepare initial drafts of standard legal documents: NDAs, DPAs, MSAs, order forms, and amendments.