Director, Privacy

Oversee the Enterprise Privacy Program, serve as VSP’s Enterprise Privacy Officer and lead the Enterprise Privacy Program. Provide leadership to privacy staff. Serve as lead subject matter expert on domestic and global privacy across the Company and ensure the Company complies with the requirements of applicable laws and regulations, company policies, procedures, and Company’s operations globally.

Serve as VSP’s Enterprise Privacy Officer and lead the Enterprise Privacy Program

Direct the vision and strategy for the maturation of the Enterprise Privacy Program to meet domestic and global regulatory requirements

Oversee complex projects and drive strategic initiatives both within the department and across the enterprise, including deploying practices of privacy by design and default, performing privacy and data impact assessments, and guiding compliant development

Lead a team of privacy professionals to collectively address the privacy needs of the company’s domestic and global operations

Direct and oversee compliance with the privacy requirements of applicable domestic and international laws and regulations (e.g., HIPAA, CCPA, and GDPR), company policies, procedures, and operations globally related to areas such as operations, adtech, and AI

Implement standards and expectations for all necessary actions and requirements of the organization to support an effective privacy program

Collaborate as a member of the AI steering committee; evaluate and identify the risks associated with proposed AI use cases and associated control needs to mitigate the risk

Guide and support ISO, EHNAC, HITRUST, and any other relevant frameworks, certifications, exams, recertifications, etc.

Implement and oversee policies, standards, and procedures for the general operation of the global Privacy Program

Oversee the mitigation of noncompliance with privacy-related laws, regulations, policies, or procedures by advising and overseeing corrective action

Guide the appropriate mitigation and investigation of privacy incidents within the organization

Identify potential areas of privacy vulnerability and risk, develop and implement corrective action plans for the resolution of issues, and provide general guidance on how to avoid or deal with similar situations in the future

Monitor and report results of the privacy efforts of the company and provide guidance for the senior management team on matters relating to privacy

Collaborate with other areas of the business to direct compliance issues to appropriate existing channels for investigation and resolution

Assist in the development of the privacy budget and monitor unit expenses to ensure unit costs are within established levels

Monitor the performance of direct reports. Provide prompt and objective coaching and counseling; conduct performance reviews

Job Specifications

Typically has the following skills or abilities:

Bachelor’s degree in a related field or equivalent experience; Minimum of 2 additional years of experience related to the privacy function

Minimum of 6 years of management experience with responsibilities for hiring, training, assigning work, and managing performance of direct reports

Ability to develop the vision and strategic plan for the maturation of the privacy program

Ability to interact effectively and problem solve with clients with internal business partners, external clients, and regulators

Regularly exercise discretion and independent judgment in the performance of job duties

General understanding of adtech, AI, and other relevant technologies frequently impacted by privacy requirements.

Proven expertise in privacy matters

Extensive knowledge of privacy integration into business processes

Proven ability to collaborate across all levels and lines of business

Excellent analytical and problem-solving skills

Excellent interpersonal and communication skills

Proven leadership skills

Working Conditions

The working environment is generally favorable.  Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc.

The above information in this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

#LI-VISIONCARE

Compensation range for the role is listed below. Applicable salary ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. As a part of the compensation package, this role may include eligible bonuses and commissions. For more information regarding VSP Vision benefits, please click here. 

Notice to Candidates: Fraud Alert - Fake Job Opportunity Solicitations Used to Collect Fees/Personal Information. 

We have been made aware that fake job opportunities are being offered by individuals posing as VSP Vision and affiliate recruiters. Click here to learn about our application process and what to watch for regarding false job opportunities. 

As a regular part of doing business, VSP Vision (“VSP”) collects many different types of personal information, including protected health information, about our audiences, including members, doctors, clients, brokers, business partners, and employees.  VSP Vision employees will have access to this sensitive personal information and are subject to follow Information Security and Privacy Policies.