Professional Experience
TwoWay Security, Inc
Advisor •February 2022 - Present
TechGC
Charter Member •May 2021 - Present
We are an independent, invitation-only, peer community where General Counsels and senior in-house legal teams share knowledge / best practices and support each other throughout our lives and careers.
PandaDoc, Inc
Director of Legal and Compliance, Senior Counsel •January 2019 - Present
Created the company's legal and compliance function as first in-house counsel, growing the department to a highly efficient team of four to meet the growing global legal and compliance needs of the organization.
• Commercial
• Draft and negotiate relevant revenue, vendor, partnership, and licensing agreements to support all areas of the business, and designed playbooks for efficient negotiation and risk mitigation during the contracting process.
• Created a legal intake system to track the progress of legal and contractual requests and established clear metrics around the efficiency of the commercial function, including adherence to our SLAs to the business, with a CSAT score of 98% for business interactions with the Legal department.
• Information Security
• Responsible for running the annual SOC 2 audit, including auditor engagement and creating efficiencies in the auditing process.
• Draft various policies including Information Security, Vendor Management, BC/DR and Incident Response and oversee annual updates as the business scaled.
• Created and ran the company's IT Steering Committee which analyzed and advised on information security-related risks to the organization at an executive level.
• Advised senior management and the Board as to best practices and trends in information security.
• Privacy
• Responsible for the drafting and updating of the company's DPA, including tracking changes in global privacy regulations such as GDPR, CPPA/CPRA and other relevant privacy laws.
• Analyze risk and advise various stakeholders including executive management, product, and marketing as to privacy requirements and design best practices.
• Implemented privacy software solution to manage cookies, DSAR requests, data mapping and other regulatory requirements.
• IP and Marketing
• Protected company's trademark and domain ownership globally in concert with the company's global expansion initiatives.
• Cultivated relationships and rigour with the marketing department to ensure compliance and scalability.
• Corporate and Employment
• Oversee and advise on M&A efforts.
• Own relationships with outside counsel, including oversight over litigation and corporate matters.
• Advise on employment laws and drafted employment-related documents globally.
• Responsible for Legal Department's budget with adherence to efficiency.
Prove, Inc
Director of Compliance/Senior Counsel •April 2014 - January 2019
Company's first in-house counsel reporting to the CFO, responsible for the overall direction and leadership of the legal and compliance department, including working with executive management, protecting the company's legal interests in contract review and negotiation, intellectual property, data privacy, data security, oversight of the vendor management program, management of outside audits and examinations, review and revision of policies and procedures. Advises on changes to legislative and regulatory requirements that impact the operations of the company, collaborating with each department to ensure management and employee compliance.
• Lead in transactional matters including negotiating, drafting and/or reviewing agreements, including licensing and SaaS agreements, BAAs, NDAs, joint development agreements, vendor contracts and consulting agreements.
• Collaborate with product managers and engineers to advise on product development and data usage, incorporating principles of privacy-by-design and obtained complete, end-to-end understanding of the life cycle of data collection and use on the company's platform.
• Create, update and maintain templates and processes to support efficient, scalable facilitation of client engagements.
• Transactional due diligence support and other ongoing business and transactional advice to senior business leaders at C-suite level.
• Compliance counseling and regulatory advocacy with federal government agencies.
• Prepare materials for Board meetings and present at Board meetings as appropriate.
• Working knowledge in FCPA and responsible for its implementation.
• Create policies and managed company's privacy and data security compliance programs.
• Knowledge and experience with information security and data privacy laws and best practices, including HIPAA, GLBA, and the EU GDPR and EU-US Privacy Shield.
• Work with product and engineering to understand company's products, development methods and infrastructure in order to ensure that appropriate controls, standards, practices, systems and policies are in place to reduce risk within the organization.
• Perform reviews and audits to reduce risk and maintain compliance with appropriate security standards; oversee external audits and risk assessments, including PCI-DSS, SOC I and.
• Respond to client security questionnaires and audits and complex technology RFPs; perform due diligence on key new partners and periodic reviews thereafter.
• Track and direct the mitigation of security incidents and manage them to resolution.
Air Methods Corporation
Sr. Internal Auditor/IT Auditor •April 2013 - April 2014
Dish Network, LLC
Sr. Business Analyst/IT Audit •July 2012 - April 2013
TransFirst, LLC
Compliance Specialist, IT •October 2009 - July 2012