Director of Privacy Compliance

EssilorLuxottica • New York, NY

401d

About The Position

The Director of Privacy Compliance at EssilorLuxottica will lead the development, implementation, and adherence to the company's privacy and compliance programs in North America. This role is crucial for ensuring compliance with state and federal privacy regulations, as well as internal policies related to anti-bribery, anti-competition, anti-money laundering, and healthcare compliance. The Director will work collaboratively with various departments to integrate data privacy into all business processes and systems, while also managing privacy complaints and regulatory investigations.

Requirements

• 10+ years of experience in privacy compliance.
• Bachelor's degree.
• Demonstrated knowledge of privacy laws in North America, including HIPAA, PIPEDA, and U.S. state privacy regulations.
• Experience with anti-bribery, anti-competition, anti-money laundering, economic sanctions, and whistleblowing requirements.
• Knowledge of healthcare compliance requirements.
• Experience in data privacy compliance and incident management, including breach response protocols.
• Strong PC skills, including Microsoft Word, PowerPoint, and Excel.
• Ability to research, interpret, and understand laws and regulations related to privacy.
• Strong interpersonal skills and the ability to build effective teams.

Nice To Haves

• Law degree from an accredited law school.
• Experience in the implementation of privacy programs.

Responsibilities

• Establish and oversee a strategic privacy program, developing and implementing policies and processes for effective compliance practices.
• Develop and ensure adherence to policies and standard operating procedures for privacy and compliance programs.
• Establish ongoing processes to investigate and report inappropriate access and disclosure of PII and PHI.
• Administer a process for receiving, documenting, tracking, and investigating complaints concerning the company's privacy practices.
• Provide strategic guidance and partnership with other departments to ensure data privacy is integrated into all business processes and systems.
• Develop and maintain a centralized repository of privacy program procedures.
• Create privacy notices for North American websites.
• Manage privacy complaints, breaches, and investigations by regulatory authorities.
• Identify, implement, and maintain the company's privacy and compliance policies and procedures in coordination with management and legal teams.
• Conduct periodic privacy and compliance risk assessments, including mitigation and remediation efforts.
• Maintain current knowledge of relevant state and federal privacy and compliance regulations.
• Ensure maintenance of appropriate privacy and confidentiality consents, authorization forms, and notices.
• Design and deploy effective compliance training and customized programs for targeted teams and leaders.
• Oversee corrective actions following compliance-related audits.
• Interact and coordinate actions with the Corporate Compliance and Privacy Teams.
• Complete all responsibilities outlined in the annual performance plan and special projects as assigned.

Benefits

• Health care
• Retirement savings
• Paid time off/vacation
• Employee discounts

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: Bachelor's degree
• Number of Employees: 10,001+ employees