• Advise product and engineering teams on legal issues across the product development lifecycle, flagging risks early and recommending practical paths forward. • Provide legal support for AI-related product development, including data retention practices, model vendor terms and acceptable use policies, opt-in flows, and customer-facing AI documentation. • Partner with procurement legal on vendor and product-related agreements, including reviews of AI model vendor contracts, partnership terms, and procurement escalations. • Support commercial legal with product and intellectual property (IP) guidance during customer negotiations, and help maintain field enablement materials as features evolve. • Counsel on open source licensing, including assessing license obligations for new dependencies and advising on upstream license changes that affect how GitLab builds and distributes software. • Draft, maintain, and improve legal templates, internal policies, and playbooks that enable teams to make consistent decisions with clear guidance. • Review product marketing materials for accuracy, and advise on advertising, trademark, and brand questions to ensure product claims are defensible and aligned with how features work. • Monitor changes in law and emerging legal risks, especially AI regulation, and propose process improvements that strengthen how GitLab ships and markets products responsibly.

• Execute the commercial legal process, from intake, resourcing, and execution, and meeting or exceeding internal SLAs, and KPIs • Advise on, negotiate, and close a range of contracts including SaaS agreements, AI addendums, data protection agreements (GDPR), commercial order forms, NDAs, professional services and partner agreements, ensuring that each is aligned with the Legal Playbook • Collaborate with internal financial teams to surface issues as it relates to contracting guidelines, policies, and escalations/exceptions process to ensure deal structures and clauses support company booking and revenue recognition targets • Update of the commercial legal playbooks on a regular basis; work with stakeholders for delegation of additional fallbacks to build out additional portions of the playbooks to require less input into day-to-day transactions • Contribute to the development and deployment of legal enablement and training materials for the GTM team; specifically, create training modules targeted to Sales on-boarding/bootcamp, self-service materials for the internal Abnormal Legal Sales Guide, and a rotating quarterly presentation on specific legal topics designed to increase contracting efficiency • Manage deal flow, manage relationship with Sales and other cross-functional partners, including efficient use and management of legal resources for load balancing • Assist with contract legal and operational risk audit monitoring strategy: keep abreast of key risks and contract clauses/attributes; assist with implementation of mitigation and monitoring program • Collaborate on the design, build, and maintenance of commercial transacting workflows in CLM platform -- each workflow should be designed to capture approvals and metadata to support internal policies and KPI reporting. • Stay current with legal technology, tools, and professional development

• Conduct phone consultations to advise clients on a variety of basic general practice issues.

• Manage, develop and improve Lucid’s compliance programs. • Ensure ongoing compliance with Lucid’s compliance programs by monitoring emerging laws, regulations and changes in business operations and product development. • Serve as Lucid’s subject matter expert on global laws and regulations relevant to SaaS operations, with an emphasis on data privacy laws, in addition to AI compliance, marketing and sales outreach, and other key compliance areas. • Responsible for tasks such as risk-based privacy compliance assessments, organization-wide controls to track compliance with relevant laws and contractual commitments, and assisting with creating and maintaining compliance resources and policies. • Continuously engage with and advise teams across Lucid to help them navigate compliance requirements and relevant privacy controls related to product development, vendors and business operations. • Promote the principle of least privilege and privacy best practices across Lucid. • Exercise a high degree of independent judgment and discretion in supporting our business teams. • Develop deep expertise in our products and technology stack, and how they use and process information.