Privacy & Compliance Program Specialist

Lucid; Raleigh (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

Lucid seeks a highly analytical compliance professional to join our legal team, focusing on governance for a fast-growing SaaS environment. You will work cross-functionally to implement privacy programs, data mapping, and policy alignment across business units.

Key duties include leading data protection initiatives, regulatory monitoring, and training programs to ensure Lucid remains compliant with global standards and emerging AI regulations.

Qualifications

• Bachelor’s degree in technology, legal, regulatory or a related discipline.
• 5+ years of privacy or compliance management experience in a B2B SaaS or cloud-native environment, heavily regulated industry or at a law firm or government agency.
• Strong operational understanding of global data protection laws (GDPR, CCPA) and emerging AI laws for SaaS.
• Demonstrated ability to work cross-functionally and translate regulatory requirements into actionable policies.
• Ability to adapt to evolving regulatory landscape and mitigate risk across a fast-growing SaaS environment.

Responsibilities

• Develop deep expertise in Lucid’s products and technology stack to understand data storage and user workflows.
• Own execution of core SaaS compliance programs including data mapping, privacy assessments, AB/AC policy implementation, global sanctions compliance, data retention policies and vendor risk management.
• Update and maintain compliance documentation with attention to detail.
• Deploy and maintain tools to track compliance related OKRs and measure program effectiveness.
• Monitor evolving global laws and regulations affecting SaaS, focusing on U.S. and EU developments.
• Manage controls for internal and customer-facing AI systems in alignment with emerging standards (e.g. EU AI Act, ISO42001).
• Partner with teams across Lucid to navigate regulatory considerations and implement controls.
• Design and deliver engaging, role-specific compliance training programs and awareness campaigns.

Skills

Cross-functional collaboration

Analytical thinking

Verbal and written communication

Regulatory knowledge (privacy/compt.

Education

Bachelor’s degree in technology or regulatory field

Tools

OneTrust

Osano

Jira

SFDC (Salesforce)

Zendesk

CSI

Job description

Protecting Lucid and our users is core to our business. We’re looking for a highly analytical and cross-functional compliance professional to join our close-knit legal team working alongside our Director of Legal, Compliance and Litigation. The ideal candidate will be an analytical thinker who asks lots of questions, and is able to efficiently manage lots of information. This position will collaborate with many of Lucid’s business units to make sure we keep abreast of the constantly changing regulatory landscape and mitigate risk across our fast-growing SaaS environment, while maintaining our compliance conscious culture.

Responsibilities

• Develop deep expertise in our products and technology stack to better understand data storage, user workflows, and internal processes.
• Own execution of core SaaS compliance programs including data mapping, privacy assessments, AB/AC policy implementation, global sanctions compliance, data retention policies and vendor risk management.
• Proactively update and maintain compliance documentation with attention to detail.
• Deploy and maintain tools to track compliance related OKRs and measure and optimize the effectiveness of compliance programs and training initiatives.
• Monitor, analyze and report on evolving global laws and regulations affecting the SaaS space, maintaining a specific focus on U.S. and EU developments.
• Manage controls for internal and customer-facing artificial intelligence systems in alignment with emerging standards (e.g. EU AI Act risk classifications, ISO42001).
• Partner directly with teams across Lucid to help them navigate regulatory considerations and implement controls related to products, vendors and business operations.
• Design and deliver engaging, role-specific compliance training programs and compliance awareness campaigns to ensure Lucidites under their role in corporate compliance and the importance of it.

Requirements

• Bachelor’s degree in technology, legal, regulatory or a related discipline.
• 5+ years of experience in privacy or compliance management within a B2B SaaS or cloud-native environment, heavily regulated industry or at a law firm or government agency.
• Strong operational understanding of global data protection laws (such as GDPR and CCPA), emerging AI laws, traditional consumer protection frameworks, and the willingness to learn other global regulatory frameworks applicable to SaaS.
• Demonstrated capability to work cross-functionally understanding the priorities of the business as a whole and of each department to thoughtfully implement compliance policies and procedures.
• Outstanding verbal and written communication skills with a demonstrated ability to translate complex legal and regulatory frameworks into plain-language questions, tasks and explanations for all departments at Lucid.
• Exceptional analytical skills to proactively spot control gaps, policy violations, and prioritize remediation paths.
• A highly responsive and self-motivated professional with a genuine curiosity for technology, a rapid learning curve, and a proven ability to take immediate initiative, prioritize multiple urgent tasks, and provide suggestions when navigating complex, ambiguous situations.
• A strong foundational understanding of how modern cloud software is built, how SaaS companies operate and how to navigate regulatory requirements around business realities.

Preferred Qualifications

• Holding one or more relevant industry designations such as CIPP (Certified Information Privacy Professional), CISA (Certified Information Systems Auditor), or CRISC (Certified in Risk and Information Systems Control).
• Direct experience implementing and managing automated compliance platforms (particularly OneTrust and Osano) and other common SaaS tools such as Jira, CSI, SFDC and Zendesk.
• Practical exposure to evaluating the transparency, explainability, and bias risks of machine learning models or automated decision-making software in order to issue spot and provide advice to employees and teams implementing internal and customer facing AI initiatives.
• Proven track record of designing, building, and scaling core privacy workflows (e.g. data mapping and DSR intake systems) with a strong passion for turning complex regulatory requirements into highly efficient, repeatable processes.