Senior Data Privacy Specialist

Job description:

Contract: Permanent/Full time

Compensation: 

If you’ve worn a pair of glasses, we’ve already met.

We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over 150 countries access to a global platform of high-quality vision care products (such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions), iconic brands that consumers love (such as Ray-Ban, Oakley, Persol, Oliver Peoples, Vogue Eyewear and Costa), as well as a network that offers consumers high-quality vision care and best-in-class shopping experiences (such as Sunglass Hut, LensCrafters, Salmoiraghi & Viganò and the GrandVision network), and leading e-commerce platforms.

Join our global community of over 190,000 dedicated employees around the world in driving the transformation of the eyewear and eyecare industry.

Discover more by following us on LinkedIn 

Your #FutureInSight with EssilorLuxottica

Are you willing to pioneer new frontiers, foster inclusivity and collaboration, embrace agility, ignite passion, and make a positive impact on the world? Join us in redefining the boundaries of what’s possible.

Your role 

We are looking for a Senior Data Privacy Specialist who will support the definition, implementation, and continuous improvement of the Group’s data protection framework, with a strong focus on technology-driven business models, including MedTech, artificial intelligence, connected devices, digital health and data-intensive innovation, while actively contributing to the deployment of the Group privacy operating model, business accountability approach and audit remediation follow-up.

The role operates in a global, complex and cross-functional environment, acting as a credible point of contact between Compliance, Legal, IT, HR, Internal Audit and Business teams, and helping the Privacy Office move from a purely reactive support model to a scalable governance and enablement model.

Main responsibilities:

• Privacy Framework & Governance: Contribute to the design, update and deployment of Group data privacy policies, procedures, standards, templates and playbooks, ensuring practical implementation across regions, business units and functions.
• Privacy Operating Model & Business Accountability: Support the deployment of the Group privacy operating model, including Business Privacy Responsible / privacy liaison coordination, role clarification, RACI implementation and business ownership of privacy compliance.
• Regulatory Compliance & Controls: Monitor applicable data protection regulations, including GDPR and relevant local privacy laws, and support the translation of regulatory requirements into internal controls, guidance and auditable evidence.
• Risk Assessment, DPIA & Remediation: Lead or coordinate privacy impact assessments, support risk evaluation, identify gaps and work with relevant stakeholders to define, track and evidence remediation actions, including internal audit action plans.
• Project, Business & Strategic Support: Act as a privacy advisor on global and local projects, including digital, HR, marketing, IT, R&D, MedTech, AI, connected devices, smart glasses, strategic partnerships, integrations and data migration initiatives, with the ability to understand emerging technologies and translate privacy requirements into pragmatic product and business guidance.

Main requirements:

• Master’s degree in Law, Business, Data Protection, or related field
• At least 6 years of experience in data privacy, compliance, governance or related areas, ideally including both a DPO role completed by advisory and implementation responsibilities in complex organizations.
• Proven experience in multinational / matrix organizations, with the ability to coordinate senior stakeholders, structure processes and support change management across functions and countries.
• Strong command of English, Frenc and Italian given the Group Privacy Office’s world wide working environment and interaction with teams based in France and Italy.
• Practical business judgment, ability to qualify actual privacy risks, prioritize under deadlines and translate legal requirements into operational, auditable and scalable solutions.
• Demonstrated interest in technology and innovation, with the ability and appetite to quickly understand MedTech, AI, connected devices, digital platforms and data-driven products, and to engage credibly with product, IT, R&D and business teams.

What’s in it for you