Director of Data Privacy & Compliance

Luxottica; Mason (OH); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Health care

Retirement savings

Paid time off

Job summary

EssilorLuxottica seeks a Director of Data Protection (EyeMed) to lead a comprehensive privacy program across the organization, ensuring HIPAA compliance and robust governance. You will work with security, legal, and executive teams to align privacy with business objectives and manage risk.

The role requires 10+ years as a privacy leader, strong policy-writing experience, and expert knowledge of North American privacy laws, including HIPAA.

Qualifications

• Bachelor’s degree required.
• 10+ years as a privacy officer or equivalent leadership role.
• Thorough knowledge of privacy laws in North America including HIPAA and state regulations.
• Experience writing policies, directing external privacy counsel, and advising on privacy issues.
• Experience with business agreements and privacy incident management.

Responsibilities

• Build and oversee a strategic privacy program with policies and processes.
• Collaborate with senior management, security, legal, and compliance for governance.
• Coordinate with information security to align security and privacy compliance.
• Develop processes to track, investigate, and report privacy breaches and inappropriate access.
• Manage breach determination and notification under HIPAA and state rules.
• Oversee privacy training and respond to regulatory investigations and complaints.
• Provide executive reporting on privacy issues and risk.
• Assist in implementing privacy policies with management and legal counsel.
• Lead periodic privacy risk assessments and remediation plans.
• Maintain knowledge of applicable state and federal privacy regulations.

Skills

Privacy leadership

HIPAA knowledge

Policy writing

Incident management

Budget oversight

Cross‑cultural communication

Team building

Education

Bachelor's degree

Juris Doctorate (J.D.)

Job description

EssilorLuxottica seeks a Director of Data Protection (EyeMed) to lead a comprehensive privacy program across the organization, ensuring HIPAA compliance and robust governance. You will work with security, legal, and executive teams to align privacy with business objectives and manage risk.

The role requires 10+ years as a privacy leader, strong policy-writing experience, and expert knowledge of North American privacy laws, including HIPAA.