Data Protection & Privacy Officer
LucidyaAl Ahsa Governorate, Eastern Province, Saudi Arabia
Posted April 9, 2025
Full Time
About the Company
Lucidya is an AI-powered unified customer experience platform (CXM) designed to support CX and Marketing leaders in large enterprises, governments, and SMEs. Our platform is tailored for organizations in the Arab world that need a unified, easy-to-use platform to manage their customer experiences and make data-driven decisions. Lucidya’s AI-powered technology, combined with a deep understanding of the Arabic language and culture—with a remarkable 92% analysis accuracy of 15 different dialects and slang—allows businesses to engage with their customers in ways that are both accurate and personal. By offering real-time insights and engagement, Lucidya helps organizations optimize customer lifecycles, reduce costs, and drive growth—all in one single platform. Lucidya is fully compliant with global and regional data privacy and security regulations, including SOC2 for data management standards, the SDAIA Personal Data Protection Law (PDPL) in Saudi Arabia, and GDPR for customers in the EU. Lucidya also adheres to the NIST Cybersecurity Framework (CSF), ensuring robust risk management practices, and complies with key US data privacy regulations such as CCPA/CPRA, UCPA, CTDPA, CPA, and VCDPA. This commitment ensures that our platform not only delivers actionable insights but also operates securely and protects the privacy of our customers’ data.
Job Description
The Data Protection & Privacy Officer (DPO) is responsible for establishing and maintaining a comprehensive data privacy and security framework for the organization. This includes governance, data handling, access control, compliance, training, and continuous improvement to safeguard customer and employee data and adhere to relevant regulations. The DPO will also act as a liaison between internal teams, auditors, and regulators.
Requirements
- Bachelor’s degree in Information Security, Computer Science, or related field.
- 4 years of experience in data privacy, security, or compliance.
- Experience in auditing and handling incidents within a corporate environment.
- Strong knowledge of PDPL, GDPR, NCA Cybersecurity Controls, and ISO 27001.
- Experience managing data protection policies, data inventories, and breach response.
- Familiarity with SaaS environments and third-party/vendor risk.
- Certifications such as CIPM, CISA, or ISO 27701 are a plus
