Compliance Manager

Lucidsoftware; Raleigh (NC); On-site; USD 130,000 - 170,000; Full time

Job summary

Lucid is seeking a highly analytical compliance professional to join the legal team in Raleigh, NC. You will partner with diverse business units to navigate the regulatory landscape for our fast-growing SaaS environment.

The role requires a data-driven mindset, strong communication, and the ability to implement and scale privacy programs across the organization. If you thrive in a fast-paced, standards-driven culture, this is your opportunity.

Qualifications

• Bachelor's degree in technology, legal, regulatory or related discipline.
• 5+ years in privacy or compliance management within B2B SaaS, cloud-native, regulated industry, law firm or gov't agency.
• Strong knowledge of GDPR/CCPA and emerging AI laws.
• Ability to work cross-functionally and translate regulatory requirements.
• Excellent written and verbal communication with ability to simplify complex concepts.

Responsibilities

• Develop deep expertise in Lucid's products and tech to inform data storage and user workflows.
• Own execution of core SaaS compliance programs including data mapping and policy implementation.
• Update and maintain compliance documentation with attention to detail.
• Deploy tools to track OKRs and measure program effectiveness.
• Monitor evolving global laws affecting SaaS, focusing on U.S. and EU developments.
• Manage controls for internal and customer AI systems aligned with emerging standards.
• Collaborate with teams to navigate regulatory considerations and implement controls.
• Design and deliver role-specific compliance training and awareness campaigns.

Skills

Privacy compliance

Regulatory analysis

Cross-functional collaboration

Strong communication

Analytical thinking

Education

Bachelor's degree

Tools

OneTrust

Osano

Jira

SFDC

Zendesk

CSI

Job description

Protecting Lucid and our users is core to our business. We’re looking for a highly analytical and cross-functional compliance professional to join our close-knit legal team working alongside our Director of Legal, Compliance and Litigation. The ideal candidate will be an analytical thinker who asks lots of questions, and is able to efficiently manage lots of information. This position will collaborate with many of Lucid’s business units to make sure we keep abreast of the constantly changing regulatory landscape and mitigate risk across our fast-growing SaaS environment, while maintaining our compliance conscious culture.

Responsibilities

• Develop deep expertise in our products and technology stack to better understand data storage, user workflows, and internal processes.
• Own execution of core SaaS compliance programs including data mapping, privacy assessments, AB/AC policy implementation, global sanctions compliance, data retention policies and vendor risk management.
• Proactively update and maintain compliance documentation with attention to detail.
• Deploy and maintain tools to track compliance related OKRs and measure and optimize the effectiveness of compliance programs and training initiatives.
• Monitor, analyze and report on evolving global laws and regulations affecting the SaaS space, maintaining a specific focus on U.S. and EU developments.
• Manage controls for internal and customer-facing artificial intelligence systems in alignment with emerging standards (e.g. EU AI Act risk classifications, ISO42001).
• Partner directly with teams across Lucid to help them navigate regulatory considerations and implement controls related to products, vendors and business operations.
• Design and deliver engaging, role-specific compliance training programs and compliance awareness campaigns to ensure Lucidites under their role in corporate compliance and the importance of it.

Requirements

• Bachelor’s degree in technology, legal, regulatory or a related discipline.
• 5+ years of experience in privacy or compliance management within a B2B SaaS or cloud-native environment, heavily regulated industry or at a law firm or government agency.
• Strong operational understanding of global data protection laws (such as GDPR and CCPA), emerging AI laws, traditional consumer protection frameworks, and the willingness to learn other global regulatory frameworks applicable to SaaS.
• Demonstrated capability to work cross-functionally understanding the priorities of the business as a whole and of each department to thoughtfully implement compliance policies and procedures.
• Outstanding verbal and written communication skills with a demonstrated ability to translate complex legal and regulatory frameworks into plain-language questions, tasks and explanations for all departments at Lucid.
• Exceptional analytical skills to proactively spot control gaps, policy violations, and prioritize remediation paths.
• A highly responsive and self-motivated professional with a genuine curiosity for technology, a rapid learning curve, and a proven ability to take immediate initiative, prioritize multiple urgent tasks, and provide suggestions when navigating complex, ambiguous situations.
• A strong foundational understanding of how modern cloud software is built, how SaaS companies operate and how to navigate regulatory requirements around business realities.

Preferred Qualifications

• Holding one or more relevant industry designations such as CIPP (Certified Information Privacy Professional), CISA (Certified Information Systems Auditor), or CRISC (Certified in Risk and Information Systems Control).
• Direct experience implementing and managing automated compliance platforms (particularly OneTrust and Osano) and other common SaaS tools such as Jira, CSI, SFDC and Zendesk.
• Practical exposure to evaluating the transparency, explainability, and bias risks of machine learning models or automated decision-making software in order to issue spot and provide advice to employees and teams implementing internal and customer facing AI initiatives.
• Proven track record of designing, building, and scaling core privacy workflows (e.g. data mapping and DSR intake systems) with a strong passion for turning complex regulatory requirements into highly efficient, repeatable processes.