Director Data Protection

Requisition I D:933345 Store # X00181 N.A. Compliance - OH CSC

Position:
Full-Time

We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over 150 countries access to a global platform of high-quality vision care products such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions, iconic brands that consumers love such as Ray‑Ban, Oakley, Persol and Oliver Peoples, as well as a network that provides consumers high‑quality vision care and best‑in‑class shopping experiences such as Sunglass Hut, Lens Crafters, and Target Optical, and leading e‑commerce platforms.

Our portfolio of more than 150 renowned brands spans various categories, from frames, lenses and instruments to brick‑and‑mortar and digital distribution as well as mid‑range to premium segments.

Our Shared Services Team accompanies and enables others within the Essilor Luxottica collective to achieve their targets. They keep people and projects running smoothly, ensuring every part of our business is provided for and well taken care of.

Join our global community of over 200,000 dedicated employees around the world in driving the transformation of the eyewear and eye‑care industry. Discover more by following us on Linked In!

The Director – Data Protection (Eye Med) leads and oversees all ongoing activities related to the development, implementation, & maintenance of, and adherence to the Company’s privacy and data protection program. This includes compliance with state and federal privacy regulations and the Company’s internal privacy policies and procedures.

• Build and oversee a strategic and comprehensive privacy program that develops, maintains, and implements policies and processes that enable consistent and compliant privacy practice.
• Work with senior management, security, legal, and compliance to establish governance for the privacy program.
• Collaborate with the information security officer to ensure alignment between security and privacy compliance.
• Establish ongoing processes to track, investigate, and report inappropriate access and disclosure of protected information.
• Establish processes for receiving, documenting, tracking, investigating, and taking action on complaints concerning the Company’s privacy policies and procedures in coordination and collaboration with similar functions.
• Manage all required breach determination and notification processes under HIPAA and applicable state breach rules and requirements.
• Oversee, develop, and deliver ongoing privacy training to the Company workforce.
• Manage privacy complaints, breaches, and investigations by regulatory authorities.
• Interact and provide reporting analysis to executive‑level leadership on all privacy issues.
• Assist in the identification, implementation, and maintenance of the Company’s privacy policies and procedures in coordination with management and legal counsel.
• Initiate and oversee periodic privacy risk assessments for the Company, including all mitigation and remediation plans and efforts.
• Maintain current knowledge and compliance of state and federal privacy regulations applicable to operations.
• Ensure the Company maintains appropriate privacy and confidentiality consents, authorization forms, information notices, and materials reflecting current privacy practices.

• Bachelor’s Degree.
• 10 years of experience as a privacy officer.
• Thorough knowledge and experience with privacy laws in North America, including HIPAA and state privacy regulations.
• Experience and skill in writing policies and procedures, directing and managing external privacy counsel, and providing guidance to the Company on privacy issues.
• Experience with business agreements.
• In‑depth experience with data privacy compliance and incident management, including implementation of breach response protocol and oversight of regulatory and individual notifications.
• Experience with budget oversight and management.
• Strong interpersonal relationships, cross‑cultural sensitivity, and ability to build effective teams.

• Juris…