Head of Legal & Compliance

Lucidya | لوسيديا; Riyadh; On-site; SAR 900,000 - 1,400,000; Full time

Job summary

Lucidya is seeking an experienced Chief Legal & Compliance Officer to own the legal, governance, risk, compliance, and data protection agenda for the company. This hands-on leadership role partners with the executive team, manages internal and external counsel, and builds the foundations for scalable growth across the GCC.

You will lead the GRC program, handle corporate matters, and drive M&A readiness while embedding privacy-by-design into products and operations, reporting to the CEO and

Qualifications

• 10+ years of legal experience, including in-house leadership in tech/SaaS or regulated environments.
• Qualified lawyer with strong commercial, corporate, and tech law background; KSA/GCC exposure preferred.
• Experience leading compliance programs (ISO 27001, SOC 2) and data protection (PDPL/GDPR).
• Hands-on M&A and corporate deal experience; stakeholder management with boards/investors.
• Regulated-industry exposure, including public sector, banking/FS, or telecom.
• Track record building/scaling legal/compliance in high-growth firms; external counsel management.
• Pre-IPO or capital-market readiness experience is a plus.

Responsibilities

• Own and lead the legal and compliance strategy with governance, risk management, and data protection.
• Streamline contracting templates and processes across customers, vendors, partners, and public sector.
• Lead GRC program ensuring ISO 27001, SOC 2, NIST, GDPR readiness with security/engineering.
• Act as Data Protection Officer aligning with PDPL, GDPR and privacy by design.
• Oversee corporate matters, governance, M&A, due diligence, and capital markets readiness.
• Lead regional expansion by establishing entities and coordinating external counsel.
• Build and lead a lean Legal & Compliance team; advise CEO and leadership.

Skills

Autonomous operator

Commercial judgment

Governance rigor

Clear communicator

English fluency

Arabic preferred

Pragmatic and lean

Independence

Education

Qualified lawyer / Law degree

Job description

About Lucidya

Lucidya is an AI‑native platform for Customer Experience (CX) Intelligence that manages entire customer lifecycles autonomously, from initial engagement through retention and growth. Unlike platforms that only surface insights and leave the action to you, Lucidya completes the loop with proprietary Natural Language Understanding (NLU) capabilities developed entirely in‑house and trained on billions of multilingual conversations. Our platform empowers marketing, customer support, CX, and research teams to deliver personalized experiences that improve customer satisfaction, retention, and lifetime value.

Why this role matters

Lucidya is growing quickly. As we expand across the GCC, serve more enterprise and government customers, and prepare for the next stage of our journey, Legal & Compliance becomes a strategic enabler of that growth. We’re looking for someone to build and lead a lean, high‑impact Legal & Compliance function that helps the business scale with confidence. You’ll own the legal, governance, risk, compliance, and data protection agenda, ensuring we remain commercially agile while meeting the expectations of customers, regulators, auditors, and investors. This is a hands‑on leadership role where you’ll partner closely with the executive team, manage a small internal team and external counsel, and build the foundations that support Lucidya’s long‑term success.

What You’ll Do

• Own Lucidya’s legal and compliance strategy, building a function that enables the business to grow while maintaining strong governance and managing risk effectively
• Streamline our commercial contracting process across customer, vendor, partner, and public sector agreements by creating practical templates, playbooks, and processes that help the business move faster without compromising protection
• Lead our Governance, Risk & Compliance (GRC) program, ensuring certifications such as ISO 27001, SOC 2 Type II, NIST, GDPR, and other compliance requirements remain audit‑ready through close partnership with Security and Engineering
• Act as Lucidya’s Data Protection Officer, ensuring compliance with Saudi PDPL, GDPR, and other privacy regulations while embedding privacy‑by‑design into our products and operations
• Lead corporate legal matters across the group structure, supporting board governance, corporate administration, mergers and acquisitions, due diligence, and future capital markets readiness
• Enable Lucidya’s regional expansion by leading the legal and compliance work required to establish new entities, manage local regulatory obligations, and coordinate external legal counsel across multiple jurisdictions
• Build and lead a lean Legal & Compliance team, creating the right balance between internal capability and external expertise while serving as a trusted advisor to the CEO, CFO, and executive leadership team

What Success Looks Like (First 6‑12 Months)

• Establish a well‑run Legal & Compliance function with clear ownership, governance, and efficient operating processes
• Streamline the contracting process and successfully integrate and develop the Legal Associate
• Deliver ISO 27001 and SOC 2 renewals on schedule while maintaining a strong, evidence‑backed compliance posture
• Implement an enterprise risk register, core corporate policies, and a robust Data Protection Officer framework
• Significantly advance Lucidya’s legal and governance readiness for mergers and acquisitions, future fundraising, and capital markets activities

Requirements

Who You Are

• 10+ years of legal experience, including in‑house legal and compliance leadership at a technology, SaaS, or comparably regulated company
• Qualified lawyer with a strong grounding in commercial, corporate, and technology law; Saudi law exposure and understanding of the KSA/GCC regulatory environment strongly preferred
• Demonstrated ownership of a compliance and certification program (ISO 27001, SOC 2 or equivalent) and of data‑protection compliance (PDPL and/or GDPR)
• Hands‑on M&A and corporate experience – managed diligence and transaction processes, ideally including work alongside investors and boards
• Regulated‑industry exposure – experience serving or operating within public‑sector, banking/financial‑services, or telecom environments
• Track record of building or scaling a legal and compliance function in a high‑growth company, and of managing external counsel effectively on a budget
• Pre‑IPO or capital‑markets readiness experience is a strong advantage

Required Skills & Competencies

• Autonomous operator. Runs the function independently with minimal oversight; brings structure to ambiguity and requires no hand‑holding
• Commercial judgment. Balances legal risk against business velocity; a business enabler, not a blocker
• Governance rigor. Builds durable policies, controls, and audit trails that withstand external scrutiny
• Clear communicator. Translates complex legal and regulatory matters into concise, decision‑ready guidance for executives and the board.
• Fluent in English; Arabic strongly preferred
• Pragmatic and lean. Knows when to build in‑house, when to use external counsel, and how to prioritize under resource constraints
• High integrity and independence. Comfortable holding the line on governance and escalating when necessary

What the hiring process will look like

Our interview process is designed to help both you and us determine whether this is the right long‑term fit. The process typically includes:

• Initial conversation with Talent Acquisition
• Interview with executive leadership
• A practical case study followed by a panel presentation interview
• Final interview with the CEO
• Culture‑fit / Offer