Director Data Protection

EssilorLuxottica Group•Mason, OH

4d•Onsite

About The Position

The Director – Data Protection (EyeMed) leads and oversees all ongoing activities related to the development, implementation, maintenance of, and adherence to the Company’s privacy and data protection program. This includes compliance with state and federal privacy regulations and the Company’s internal privacy policies and procedures. EssilorLuxottica is a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. They offer industry stakeholders in over 150 countries access to a global platform of high-quality vision care products. Their Shared Services Team accompanies and enables others within the EssilorLuxottica collective to achieve their targets, ensuring every part of the business is provided for and well taken care of. Join their global community of over 200,000 dedicated employees.

Requirements

Bachelor’s Degree
10 years experience as a privacy officer.
Thorough knowledge and experience with privacy laws in North America, including HIPAA and state privacy regulations.
Experience and skill at writing policies and procedures, directing and managing external privacy counsel and providing opinions/guidance to the Company on privacy issues.
Experience and thorough knowledge of business agreements.
In-depth experience with data privacy compliance and incident management, including implementation of breach response protocol, oversight of regulatory, individual notifications/compliance.
Experience with budget oversight, management.
Strong interpersonal relationships, cross cultural sensitivity, builds effective teams

Nice To Haves

Juris Doctorate (J.D.) from an accredited law school.
Bachelor’s degree in a healthcare-related field.
Privacy certification, such as Certified Information Privacy Professional (CIPP).

Responsibilities

Builds and oversees a strategic and comprehensive privacy program that develops, maintains, and implements policies and processes that enable consistent and compliant privacy practice.
Works with Sr. Management, security, legal and compliance to establish governance for the privacy program.
Collaborates with information security officer to ensure alignment between security and privacy compliance.
Establishes ongoing process to track, investigate, and report inappropriate access and disclosure of protected information.
Establish process for receiving, documenting, tracking, investigating and taking action on complaints concerning the Company’s privacy policies and procedures in coordination and collaboration with other similar functions.
Manages all required breach determination and notification processes under HIPAA and applicable state breach rules, requirements.
Oversees, develops, and delivers ongoing privacy training to Company workforce.
Manages privacy complaints, breaches and investigations by regulatory authorities.
Interacts and provide reporting analysis to executive-level leadership on all privacy issues.
Assists the identification, implementation, and maintenance of the Company’s privacy policies and procedures in coordination with Company management and legal counsel.
Initiate and oversees periodic privacy risk assessments for the Company, including all mitigation and remediation plans/efforts.
Maintain current knowledge and compliance of state and federal privacy regulations applicable to Operations.
Ensures the Company maintains appropriate privacy and confidentiality consents authorization forms and information notices and materials reflecting current privacy practices.