Head of Legal & Compliance

Role Overview

Head of Legal & Compliance at Lucidya, based in the GCC region. This is a hands-on leadership role reporting to executive leadership, responsible for building and leading a lean Legal & Compliance function that enables business growth while maintaining strong governance and managing risk effectively.

Company Overview

Lucidya is an AI-native platform for Customer Experience (CX) Intelligence that manages entire customer lifecycles autonomously, from initial engagement through retention and growth. The platform uses proprietary Natural Language Understanding (NLU) capabilities developed in-house and trained on billions of multilingual conversations. It empowers marketing, customer support, CX, and research teams to deliver personalized experiences that improve customer satisfaction, retention, and lifetime value. The company is expanding across the GCC and serving enterprise and government customers.

Role Purpose

To build and lead a strategic Legal & Compliance function that enables Lucidya to scale with confidence across the GCC region. You will own the legal, governance, risk, compliance, and data protection agenda, ensuring the business remains commercially agile while meeting the expectations of customers, regulators, auditors, and investors. This is a hands-on leadership role where you will partner closely with the executive team, manage a small internal team and external counsel, and build the foundations that support Lucidya's long-term success.

Key Responsibilities

Strategy & Governance

• Own Lucidya's legal and compliance strategy, building a function that enables business growth while maintaining strong governance and managing risk effectively.
• Lead corporate legal matters across the group structure, supporting board governance, corporate administration, mergers and acquisitions, due diligence, and future capital markets readiness.
• Implement an enterprise risk register and core corporate policies.

Compliance & Certifications

• Lead the Governance, Risk & Compliance (GRC) program, ensuring certifications such as ISO 27001, SOC 2 Type II, NIST, GDPR, and other compliance requirements remain audit-ready through close partnership with Security and Engineering.
• Deliver ISO 27001 and SOC 2 renewals on schedule while maintaining a strong, evidence-backed compliance posture.

Data Protection & Privacy

• Act as Lucidya's Data Protection Officer, ensuring compliance with Saudi PDPL, GDPR, and other privacy regulations while embedding privacy-by-design into products and operations.
• Implement a robust Data Protection Officer framework.

Commercial Contracting

• Streamline commercial contracting processes across customer, vendor, partner, and public sector agreements by creating practical templates, playbooks, and processes that help the business move faster without compromising protection.
• Streamline the contracting process and successfully integrate and develop the Legal Associate.

Regional Expansion

• Enable Lucidya's regional expansion by leading the legal and compliance work required to establish new entities, manage local regulatory obligations, and coordinate external legal counsel across multiple jurisdictions.

Team Leadership

• Build and lead a lean Legal & Compliance team, creating the right balance between internal capability and external expertise.
• Serve as a trusted advisor to the CEO, CFO, and executive leadership team.

Qualifications & Experience

• 10+ years of legal experience, including in-house legal and compliance leadership at a technology, SaaS, or comparably regulated company.
• Qualified lawyer with a strong grounding in commercial, corporate, and technology law.
• Saudi law exposure and understanding of the KSA/GCC regulatory environment strongly preferred.
• Demonstrated ownership of a compliance and certification program such as ISO 27001, SOC 2, or equivalent.
• Demonstrated ownership of data-protection compliance including PDPL and/or GDPR.
• Hands-on mergers and acquisitions and corporate experience, including management of diligence and transaction processes, ideally including work alongside investors and boards.
• Regulated-industry exposure including service or operation within public-sector, banking/financial-services, or telecom environments.
• Track record of building or scaling a legal and compliance function in a high-growth company.
• Track record of managing external counsel effectively on a budget.
• Pre-IPO or capital-markets readiness experience is a strong advantage.

Skills & Competencies

• Autonomous operator who runs the function independently with minimal oversight and brings structure to ambiguity.
• Commercial judgment that balances legal risk against business velocity; acts as a business enabler, not a blocker.
• Governance rigor to build durable policies, controls, and audit trails that withstand external scrutiny.
• Clear communicator who translates complex legal and regulatory matters into concise, decision-ready guidance for executives and the board.
• Fluent in English; Arabic strongly preferred.
• Pragmatic and lean approach with knowledge of when to build in-house, when to use external counsel, and how to prioritize under resource constraints.
• High integrity and independence with comfort holding the line on governance and escalating when necessary.

Additional Information

Success Metrics (First 6–12 Months)

• Establish a well-run Legal & Compliance function with clear ownership, governance, and efficient operating processes.
• Streamline the contracting process and successfully integrate and develop the Legal Associate.
• Deliver ISO 27001 and SOC 2 renewals on schedule while maintaining a strong, evidence-backed compliance posture.
• Implement an enterprise risk register, core corporate policies, and a robust Data Protection Officer framework.
• Significantly advance Lucidya's legal and governance readiness for mergers and acquisitions, future fundraising, and capital markets activities.