Director, Data Privacy & Protection

EssilorLuxottica; Mason (OH); On-site; USD 140,000 - 210,000; Full time

Job summary

EssilorLuxottica is seeking a Director of Data Protection (EyeMed) to lead the privacy program across the enterprise, ensuring compliance with HIPAA and state privacy regulations. You will collaborate with security, legal, and executives to govern privacy practices, manage breaches, and drive training and policy development.

The role requires senior-level experience in data protection, policy writing, and incident response, with a focus on North American privacy laws.

Qualifications

• Bachelor’s degree required; JD preferred for senior privacy leadership.
• Thorough knowledge of privacy laws in North America including HIPAA.
• Experience drafting and maintaining privacy policies and procedures.
• Experience with business agreements and external privacy counsel.
• Strong data privacy compliance and incident management background.
• Budget oversight experience and cross‑functional collaboration.

Responsibilities

• Lead and oversee the privacy program development and maintenance.
• Collaborate with senior management, security, legal, and compliance for governance.
• Align privacy and security with enterprise programs.
• Track, investigate, and report privacy breaches and access disclosures.
• Manage breach determination and notification under HIPAA and state rules.
• Deliver ongoing privacy training to employees.
• Handle privacy complaints and regulatory investigations.
• Provide reports to executive leadership on privacy issues.
• Identify and maintain privacy policies in coordination with legal counsels.
• Conduct periodic privacy risk assessments and remediation plans.
• Maintain current knowledge of applicable privacy regulations.
• Ensure proper consents and notices reflecting current privacy practices.

Skills

Privacy law knowledge

Policy drafting

Breach response coordination

HIPAA expertise

Incident management

Budget oversight

Cross-cultural collaboration

Communication skills

Education

Bachelor's Degree

Juris Doctorate (J.D.)

Job description

EssilorLuxottica is seeking a Director of Data Protection (EyeMed) to lead the privacy program across the enterprise, ensuring compliance with HIPAA and state privacy regulations. You will collaborate with security, legal, and executives to govern privacy practices, manage breaches, and drive training and policy development.

The role requires senior-level experience in data protection, policy writing, and incident response, with a focus on North American privacy laws.