Role Description
We are looking for our first Senior Corporate Counsel to serve as the embedded legal partner for our Product and Engineering organizations. This role sits at the intersection of product counseling, payments and fintech regulatory work, including privacy and AI governance - advising directly on the systems restaurants use to run their businesses, including AI-powered guest experiences and embedded payments infrastructure. You'll report to the Head of Legal and you'll be an early hire on the Legal team, with significant ownership over how we build compliant, well-designed products from day one.
This role is remote and can be based anywhere in the United States, with a preference for SF Bay Area or NYC-based candidates.
Responsibilities
-
Serve as embedded legal counsel to Product, Engineering, and Payments team advising on new features, AI-powered tools, pricing models, and payments integrations from concept through launch.
-
Own legal review of AI-related products and features, including training data sourcing, model risk, algorithmic decision-making, and required disclosures.
-
Advise on regulatory compliance for payments and fintech-adjacent products, including embedded payments, money movement, card network rules, and PCI-DSS considerations.
-
Build and maintain the privacy program elements most relevant to product: data collection and retention practices, consumer disclosures, and compliance with CCPA/CPRA and other state privacy laws.
-
Monitor emerging AI regulation (state AI laws, FTC guidance, and international frameworks where relevant) and translate it into practical, actionable product guidance.
-
Draft and negotiate technology, data, and AI vendor agreements, including data and model licensing terms.
-
Advise on digital accessibility compliance for product and engineering (e.g., ADA Title III risk, WCAG conformance) and counsel teams on accessible design before launch.
-
Partner with the General Counsel and business teams on regulatory risk assessments for new markets, products, and features.
-
Build scalable playbooks, templates, and self-serve tools so product and engineering teams can move quickly with the right guardrails in place.
-
Support incident response for privacy or AI-related issues, coordinating across engineering, security, and communications.
-
Manage outside counsel on discrete regulatory, payments, or AI matters as needed.
Qualifications
-
J.D. and active bar membership in good standing in at least one U.S. jurisdiction.
-
6+ years of legal experience, including meaningful in-house product counsel experience at a technology company.
-
Direct experience advising on AI/ML products, with familiarity with the emerging AI regulatory landscape.
-
Experience with fintech or payments products - embedded payments, money movement, card issuing, or similar.
-
Substantive privacy law experience (CCPA/CPRA, GDPR, and state comprehensive privacy laws).
-
Experience in restaurant technology, hospitality tech, or vertical SaaS strongly preferred.
-
Strong builder mentality, with experience creating processes, playbooks, and standards rather than just applying existing ones.
-
Ability to translate complex legal and regulatory requirements into clear, practical guidance for product and engineering teams.
-
Comfort working independently in a fast-moving, ambiguous environment with incomplete information.
Benefits
-
The estimated starting base salary range for this role is $180,000 - $220,000, plus a generous pre-IPO equity package.
-
Other benefits include comprehensive health coverage, remote-first workplace, unlimited PTO - plus extra fun perks!
Notice - Employment Scams
Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address. We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as "phishing" or βspamβ and do not respond.