Director Data Protection

Luxottica; Mason (OH); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Health care

Retirement savings

Paid time off

Job summary

EssilorLuxottica seeks a Director of Data Protection (EyeMed) to lead a comprehensive privacy program across the organization, ensuring HIPAA compliance and robust governance. You will work with security, legal, and executive teams to align privacy with business objectives and manage risk.

The role requires 10+ years as a privacy leader, strong policy-writing experience, and expert knowledge of North American privacy laws, including HIPAA.

Qualifications

• Bachelor’s degree required.
• 10+ years as a privacy officer or equivalent leadership role.
• Thorough knowledge of privacy laws in North America including HIPAA and state regulations.
• Experience writing policies, directing external privacy counsel, and advising on privacy issues.
• Experience with business agreements and privacy incident management.

Responsibilities

• Build and oversee a strategic privacy program with policies and processes.
• Collaborate with senior management, security, legal, and compliance for governance.
• Coordinate with information security to align security and privacy compliance.
• Develop processes to track, investigate, and report privacy breaches and inappropriate access.
• Manage breach determination and notification under HIPAA and state rules.
• Oversee privacy training and respond to regulatory investigations and complaints.
• Provide executive reporting on privacy issues and risk.
• Assist in implementing privacy policies with management and legal counsel.
• Lead periodic privacy risk assessments and remediation plans.
• Maintain knowledge of applicable state and federal privacy regulations.

Skills

Privacy leadership

HIPAA knowledge

Policy writing

Incident management

Budget oversight

Cross‑cultural communication

Team building

Education

Bachelor's degree

Juris Doctorate (J.D.)

Job description

Position Title

Director – Data Protection (EyeMed)

EssilorLuxottica is a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses, serving 150+ countries with iconic brands such as Essilor, Ray‑Ban, Oakley, and many retail partners.

Major Duties and Responsibilities

• Build and oversee a strategic privacy program, developing, maintaining, and implementing policies and processes that enable compliant privacy practice.
• Work with senior management, security, legal, and compliance to establish governance for the privacy program.
• Collaborate with the information security officer to align security and privacy compliance.
• Develop ongoing processes to track, investigate, and report inappropriate access and disclosure of protected information.
• Establish processes for receiving, documenting, tracking, investigating, and taking action on complaints concerning the company’s privacy policies and procedures, in coordination with related functions.
• Manage all breach determination and notification processes under HIPAA and applicable state breach rules.
• Oversee, develop, and deliver ongoing privacy training for the workforce.
• Manage privacy complaints, breaches, and investigations by regulatory authorities.
• Provide reporting analysis to executive‑level leadership on all privacy issues.
• Assist in implementing and maintaining privacy policies and procedures in coordination with management and legal counsel.
• Initiate and oversee periodic privacy risk assessments, including mitigation and remediation plans.
• Maintain current knowledge of state and federal privacy regulations applicable to operations.
• Ensure the company maintains appropriate consent forms and information notices reflecting current privacy practices.

Basic Qualifications

• Bachelor’s degree.
• 10 years of experience as a privacy officer.
• Thorough knowledge of privacy laws in North America, including HIPAA and state privacy regulations.
• Experience writing policies and procedures, directing external privacy counsel, and providing guidance on privacy issues.
• Experience with business agreements.
• In‑depth knowledge of data privacy compliance and incident management, including breach response protocols and regulatory notifications.
• Budget oversight and management experience.
• Strong interpersonal skills, cross‑cultural sensitivity, and ability to build effective teams.

Preferred Qualifications

• Juris Doctorate (J.D.) from an accredited law school.
• Bachelor’s degree in a healthcare‑related field.
• Privacy certification (e.g., CIPP).

Compensation & Benefits

Employee pay is determined by geography, experience, qualifications, and local minimum wage requirements. Compensation may include a competitive bonus and/or commission plan, complemented by a total rewards package. Benefits may include health care, retirement savings, paid time off/vacation, and employee discounts.

Equal Opportunity Employer

EssilorLuxottica complies with all applicable laws related to the application and hiring process. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, gender, national origin, social origin, social condition, perceived domestic violence, sexual aggression or stalking, religion, age, disability, sexual orientation, gender identity or expression, citizenship, ancestry, veteran or military status, marital status, pregnancy (including unlawful discrimination on the basis of a legally protected pregnancy or maternity leave), genetic information, or any other characteristics protected by law. Native Americans in the U.S. receive preference in accordance with Tribal Law.