Head of Legal & Compliance

Lucidya; Riyadh; On-site; SAR 300,000 - 600,000; Full time

Job summary

Lucidya is seeking a senior, hands-on Head of Legal & Compliance to build and lead a lean function across the GCC. You will own governance, risk, and data protection, partnering with executives, audits, regulators, and investors to enable scalable growth.

You will manage corporate matters, streamline contracting, and drive certifications like ISO 27001 and SOC 2 Type II, while embedding privacy-by-design across products and operations.

Qualifications

• 10+ years of legal experience at technology/SaaS or regulated companies.
• Experience leading in-house legal and compliance teams.
• Proven ability to manage certifications (ISO 27001, SOC 2) and data protection regimes.

Responsibilities

• Own Lucidya's legal and compliance strategy, building a lean function with strong governance.
• Streamline commercial contracting with templates and playbooks for faster, safer deals.
• Lead GRC program to maintain audit-ready certifications (ISO 27001, SOC 2 Type II, NIST, GDPR).
• Act as Data Protection Officer ensuring PDPL, GDPR compliance and privacy-by-design.
• Oversee corporate matters including governance, M&A diligence, and capital markets readiness.
• Support regional expansion, new entities, regulatory obligations, and external counsel coordination.
• Build and mentor a lean team, balancing in-house and external expertise.

Skills

Legal leadership

ISO 27001

SOC 2

M&A

Regulatory compliance

Corporate law

English

Arabic

Education

Law degree

Job description

About Lucidya

Lucidya is an AI-native platform for Customer Experience (CX) Intelligence that manages entire customer lifecycles autonomously, from initial engagement through retention and growth.

Unlike platforms that only surface insights and leave the action to you, Lucidya completes the loop with proprietary Natural Language Understanding (NLU) capabilities developed entirely in-house and trained on billions of multilingual conversations. Our platform empowers marketing, customer support, CX, and research teams to deliver personalized experiences that improve customer satisfaction, retention, and lifetime value.

Why this role matters

Lucidya is growing quickly. As we expand across the GCC, serve more enterprise and government customers, and prepare for the next stage of our journey, Legal & Compliance becomes a strategic enabler of that growth.

We're looking for someone to build and lead a lean, high-impact Legal & Compliance function that helps the business scale with confidence. You'll own the legal, governance, risk, compliance, and data protection agenda, ensuring we remain commercially agile while meeting the expectations of customers, regulators, auditors, and investors.

This is a hands‑on leadership role where you'll partner closely with the executive team, manage a small internal team and external counsel, and build the foundations that support Lucidya's long‑term success.

What You’ll Do

• Own Lucidya's legal and compliance strategy, building a function that enables the business to grow while maintaining strong governance and managing risk effectively.
• Streamline our commercial contracting process across customer, vendor, partner, and public sector agreements by creating practical templates, playbooks, and processes that help the business move faster without compromising protection.
• Lead our Governance, Risk & Compliance (GRC) program, ensuring certifications such as ISO 27001, SOC 2 Type II, NIST, GDPR, and other compliance requirements remain audit‑ready through close partnership with Security and Engineering.
• Act as Lucidya's Data Protection Officer, ensuring compliance with Saudi PDPL, GDPR, and other privacy regulations while embedding privacy‑by‑design into our products and operations.
• Lead corporate legal matters across the group structure, supporting board governance, corporate administration, mergers and acquisitions, due diligence, and future capital markets readiness.
• Enable Lucidya's regional expansion by leading the legal and compliance work required to establish new entities, manage local regulatory obligations, and coordinate external legal counsel across multiple jurisdictions.
• Build and lead a lean Legal & Compliance team, creating the right balance between internal capability and external expertise while serving as a trusted advisor to the CEO, CFO, and executive leadership team.

What Success Looks Like (First 6–12 Months)

• Establish a well‑run Legal & Compliance function with clear ownership, governance, and efficient operating processes.
• Streamline the contracting process and successfully integrate and develop the Legal Associate.
• Deliver ISO 27001 and SOC 2 renewals on schedule while maintaining a strong, evidence‑backed compliance posture.
• Implement an enterprise risk register, core corporate policies, and a robust Data Protection Officer framework.
• Significantly advance Lucidya's legal and governance readiness for mergers and acquisitions, future fundraising, and capital markets activities.

Who You Are

• 10+ years of legal experience, including in‑house legal and compliance leadership at a technology, SaaS, or comparably regulated company.
• Qualified lawyer with a strong grounding in commercial, corporate, and technology law; Saudi law exposure and understanding of the KSA/GCC regulatory environment strongly preferred.
• Demonstrated ownership of a compliance and certification program (ISO 27001, SOC 2 or equivalent) and of data‑protection compliance (PDPL and/or GDPR).
• Hands‑on M&A and corporate experience – managed diligence and transaction processes, ideally including work alongside investors and boards.
• Regulated‑industry exposure – experience serving or operating within public‑sector, banking/financial‑services, or telecom environments.
• Track record of building or scaling a legal and compliance function in a high‑growth company, and of managing external counsel effectively on a budget.
• Pre‑IPO or capital‑markets readiness experience is a strong advantage.

Required Skills & Competencies

• Autonomous operator. Runs the function independently with minimal oversight; brings structure to ambiguity and requires no hand‑holding.
• Commercial judgment. Balances legal risk against business velocity; a business enabler, not a blocker.
• Governance rigor. Builds durable policies, controls, and audit trails that withstand external scrutiny.
• Clear communicator. Translates complex legal and regulatory matters into concise, decision‑ready guidance for executives and the board.
• Fluent in English; Arabic strongly preferred.
• Pragmatic and lean. Knows when to build in‑house, when to use external counsel, and how to prioritize under resource constraints.
• High integrity and independence. Comfortable holding the line on governance and escalating when necessary