Privacy & Compliance Program Specialist

Lucid Software is the leader in visual collaboration and work acceleration, helping teams see and build the future by turning ideas into reality. Our products include the Visual Collaboration Suite (Lucidchart and Lucidspark) and airfocus. We hold true to our core values: innovation in everything we do, passion & excellence in every area, individual empowerment, initiative and ownership, and teamwork over ego. At Lucid, we value diverse perspectives and are dedicated to creating an environment and culture that is respectful and inclusive for everyone. Lucid is a hybrid workplace. We promote a healthy work-life balance by allowing employees to work remotely, from one of our offices, or a combination of the two depending on the needs of the role and team.

Since the company’s founding, Lucid Software has received numerous global and regional recognitions for its products, business, and workplace culture. These include being listed to the Forbes Cloud 100, Fast Company Most Innovative Companies, Fortune Best Workplaces in Technology, and PEOPLE’s Companies that Care. Lucid’s solutions are used by more than 100 million users across the globe, making Lucid the most used visual collaboration platform by the Fortune 500. Our customers include Google, GE, and NBC Universal, and we partner with leaders such as Google, Atlassian, and Microsoft. 

Protecting Lucid and our users is core to our business. We’re looking for a highly analytical and cross-functional compliance professional to join our close-knit legal team working alongside our Director of Legal, Compliance and Litigation. The ideal candidate will be an analytical thinker who asks lots of questions, and is able to efficiently manage lots of information. This position will collaborate with many of Lucid’s business units to make sure we keep abreast of the constantly changing regulatory landscape and mitigate risk across our fast-growing SaaS environment, while maintaining our compliance conscious culture.

Responsibilities

• Develop deep expertise in our products and technology stack to better understand data storage, user workflows, and internal processes. 
• Own execution of core SaaS compliance programs including data mapping, privacy assessments, AB/AC policy implementation, global sanctions compliance, data retention policies and vendor risk management. 
• Proactively update and maintain compliance documentation with attention to detail.
• Deploy and maintain tools to track compliance related OKRs and measure and optimize the effectiveness of compliance programs and training initiatives.
• Monitor, analyze and report on evolving global laws and regulations affecting the SaaS space, maintaining a specific focus on U.S. and EU developments.
• Manage controls for internal and customer-facing artificial intelligence systems in alignment with emerging standards (e.g., EU AI Act risk classifications, ISO42001).
• Partner directly with teams across Lucid to help them navigate regulatory considerations and implement controls related to products, vendors and business operations.
• Design and deliver engaging, role-specific compliance training programs and compliance awareness campaigns to ensure Lucidites under their role in corporate compliance and the importance of it.

Requirements

• Bachelor’s degree in technology, legal, regulatory or a related discipline.
• 5+ years of experience in privacy or compliance management within a B2B SaaS or cloud-native environment, heavily regulated industry or at a law firm or government agency.
• Strong operational understanding of global data protection laws (such as GDPR and CCPA), emerging AI laws, traditional consumer protection frameworks, and the willingness to learn other global regulatory frameworks applicable to SaaS.
• Demonstrated capability to work cross-functionally understanding the priorities of the business as a whole and of each department to thoughtfully implement compliance policies and procedures. 
• Outstanding verbal and written communication skills with a demonstrated ability to translate complex legal and regulatory frameworks into plain-language questions, tasks and explanations for all departments at Lucid.
• Exceptional analytical skills to proactively spot control gaps, policy violations, and prioritize remediation paths.
• A highly responsive and self-motivated professional with a genuine curiosity for technology, a rapid learning curve, and a proven ability to take immediate initiative, prioritize multiple urgent tasks, and provide suggestions when navigating complex, ambiguous situations. 
• A strong foundational understanding of how modern cloud software is built, how SaaS companies operate and how to navigate regulatory requirements around business realities. 

Preferred Qualifications

• Holding one or more relevant industry designations such as CIPP (Certified Information Privacy Professional), CISA (Certified Information Systems Auditor), or CRISC (Certified in Risk and Information Systems Control).
• Direct experience implementing and managing automated compliance platforms (particularly OneTrust and Osano) and other common SaaS tools such as Jira, CSI, SFDC and Zendesk.
• Practical exposure to evaluating the transparency, explainability, and bias risks of machine learning models or automated decision-making software in order to issue spot and provide advice to employees and teams implementing internal and customer facing AI initiatives.
• Proven track record of designing, building, and scaling core privacy workflows (e.g. data mapping and DSR intake systems) with a strong passion for turning complex regulatory requirements into highly efficient, repeatable processes. 

#LI-MK1