Director Data Protection

EssilorLuxottica; Mason (OH); On-site; USD 140,000 - 210,000; Full time

Job summary

EssilorLuxottica is seeking a Director of Data Protection (EyeMed) to lead the privacy program across the enterprise, ensuring compliance with HIPAA and state privacy regulations. You will collaborate with security, legal, and executives to govern privacy practices, manage breaches, and drive training and policy development.

The role requires senior-level experience in data protection, policy writing, and incident response, with a focus on North American privacy laws.

Qualifications

• Bachelor’s degree required; JD preferred for senior privacy leadership.
• Thorough knowledge of privacy laws in North America including HIPAA.
• Experience drafting and maintaining privacy policies and procedures.
• Experience with business agreements and external privacy counsel.
• Strong data privacy compliance and incident management background.
• Budget oversight experience and cross‑functional collaboration.

Responsibilities

• Lead and oversee the privacy program development and maintenance.
• Collaborate with senior management, security, legal, and compliance for governance.
• Align privacy and security with enterprise programs.
• Track, investigate, and report privacy breaches and access disclosures.
• Manage breach determination and notification under HIPAA and state rules.
• Deliver ongoing privacy training to employees.
• Handle privacy complaints and regulatory investigations.
• Provide reports to executive leadership on privacy issues.
• Identify and maintain privacy policies in coordination with legal counsels.
• Conduct periodic privacy risk assessments and remediation plans.
• Maintain current knowledge of applicable privacy regulations.
• Ensure proper consents and notices reflecting current privacy practices.

Skills

Privacy law knowledge

Policy drafting

Breach response coordination

HIPAA expertise

Incident management

Budget oversight

Cross-cultural collaboration

Communication skills

Education

Bachelor's Degree

Juris Doctorate (J.D.)

Job description

Requisition I D:933345 Store # X00181 N.A. Compliance - OH CSC

Position: Full-Time

We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over 150 countries access to a global platform of high-quality vision care products such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions, iconic brands that consumers love such as Ray‑Ban, Oakley, Persol and Oliver Peoples, as well as a network that provides consumers high‑quality vision care and best‑in‑class shopping experiences such as Sunglass Hut, LensCrafters, and Target Optical, and leading e‑commerce platforms.

Our portfolio of more than 150 renowned brands spans various categories, from frames, lenses and instruments to brick‑and‑mortar and digital distribution as well as mid‑range to premium segments.

Our Shared Services Team accompanies and enables others within the EssilorLuxottica collective to achieve their targets. They keep people and projects running smoothly, ensuring every part of our business is provided for and well taken care of.

Join our global community of over 200,000 dedicated employees around the world in driving the transformation of the eyewear and eye‑care industry. Discover more by following us on LinkedIn!

GENERAL FUNCTION

The Director – Data Protection (EyeMed) leads and oversees all ongoing activities related to the development, implementation, & maintenance of, and adherence to the Company’s privacy and data protection program. This includes compliance with state and federal privacy regulations and the Company’s internal privacy policies and procedures.

MAJOR DUTIES AND RESPONSIBILITIES

• Build and oversee a strategic and comprehensive privacy program that develops, maintains, and implements policies and processes that enable consistent and compliant privacy practice.
• Work with senior management, security, legal, and compliance to establish governance for the privacy program.
• Collaborate with the information security officer to ensure alignment between security and privacy compliance.
• Establish ongoing processes to track, investigate, and report inappropriate access and disclosure of protected information.
• Establish processes for receiving, documenting, tracking, investigating, and taking action on complaints concerning the Company’s privacy policies and procedures in coordination and collaboration with similar functions.
• Manage all required breach determination and notification processes under HIPAA and applicable state breach rules and requirements.
• Oversee, develop, and deliver ongoing privacy training to the Company workforce.
• Manage privacy complaints, breaches, and investigations by regulatory authorities.
• Interact and provide reporting analysis to executive‑level leadership on all privacy issues.
• Assist in the identification, implementation, and maintenance of the Company’s privacy policies and procedures in coordination with management and legal counsel.
• Initiate and oversee periodic privacy risk assessments for the Company, including all mitigation and remediation plans and efforts.
• Maintain current knowledge and compliance of state and federal privacy regulations applicable to operations.
• Ensure the Company maintains appropriate privacy and confidentiality consents, authorization forms, information notices, and materials reflecting current privacy practices.

BASIC QUALIFICATIONS

• Bachelor’s Degree.
• 10 years of experience as a privacy officer.
• Thorough knowledge and experience with privacy laws in North America, including HIPAA and state privacy regulations.
• Experience and skill in writing policies and procedures, directing and managing external privacy counsel, and providing guidance to the Company on privacy issues.
• Experience with business agreements.
• In‑depth experience with data privacy compliance and incident management, including implementation of breach response protocol and oversight of regulatory and individual notifications.
• Experience with budget oversight and management.
• Strong interpersonal relationships, cross‑cultural sensitivity, and ability to build effective teams.

PREFERRED QUALIFICATIONS

• Juris Doctorate (J.D.) from an accredited law school.
• Bachelor’s degree in a healthcare‑related field.
• Privacy certification, such as Certified Information Privacy Professional (CIPP).

This posting is for an existing vacancy within our business. Employee pay is determined by multiple factors, including geography, experience, qualifications, skills, and local minimum wage requirements. In addition, you may also be offered a competitive bonus and/or commission plan that complements a first‑class total rewards package. Benefits may include health care, retirement savings, paid time off/vacation, and various employee discounts.

EssilorLuxottica complies with all applicable laws related to the application and hiring process. If you would like to provide feedback regarding an active job posting, or if you are an individual with a disability who would like to request a reasonable accommodation, please call the EssilorLuxottica SpeakUp Hotline at 844‑303‑0229 (be sure to provide your name, job id number, and contact information so that we may follow up in a timely manner) or [e-mail].

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, gender, national origin, social origin, social condition, protection as a victim of domestic violence, sexual aggression or stalking, religion, age, disability, sexual orientation, gender identity or expression, citizenship, ancestry, veteran or military status, marital status, pregnancy (including unlawful discrimination on the basis of a legally protected pregnancy or maternity leave), genetic information or any other characteristics protected by law. Native Americans in the US receive preference in accordance with Tribal Law.