Compliance Manager

We are **EssilorLuxottica,** a global leader in the design, manufacture and distribution of ophthalmic lenses, frames and sunglasses. We bring together the expertise of two industry pioneers, one in advanced lens technologies and the other in the craftsmanship of iconic eyewear, creating a vertically integrated business that is uniquely positioned to address the world’s evolving vision needs. We craft exclusive eyewear brands **Ray-Ban, Oakley**, **Oliver Peoples, Persol, Costa** and more, alongside esteemed licensed brands such as **Tiffany & Co, Burberry**, and **CHANEL** whilst our cutting-edge lenses **Varilux**and **Transitions** lead the industry in innovation. In **Australia**and** New Zealand,** we operate the iconic retail and eye care brands**:Sunglass Hut, Oakley, OPSM, Ray-Ban**and **Laubman & Pank.**Every day, EssilorLuxottica’s _190,000 employees in 150 countries _work towards a common mission to help people _see more and be more_._

Supports efforts to lead, drive and enhance the Compliance program for ANZ to ensure business practices and activities comply with EssilorLuxottica internal policies and procedures, local laws and regulations; recommending, coordinating and supporting Compliance initiatives and serving ANZ as a strategic business partner by advising and guiding employees and partners to effectively prevent and/or detect violations of law, regulations, internal policies and procedures.

**Main Responsibilities/Key Accountabilities**:
This position reports to the Compliance Director, Asia & China (the “Manager”) and will cover EssilorLuxottica entities and businesses in Australia and New Zealand.

Essential duties and responsibilities include the following. Other duties may be assigned.

**1) Implement EssilorLuxottica’s Compliance policies, procedures, systems and processes to ensure appropriate gatekeeping mechanism in place to promote a proactive compliant and ethical culture (50%)**
- Oversee implementation and governance of the Group’s Compliance program and seek continuous improvement of the program to ensure enforcement within ANZ.
- Identify potential areas of compliance vulnerability and risk; develop and implement associated risk mitigation programs and/or processes in areas such as anti-bribery and corruption, healthcare compliance, anti-money laundering and economic sanctions, spam compliance, modern slavery, whistleblowing, workplace surveillance.
- Support designing, managing and deploying effective compliance training, communication and customized programs suitable for the designated countries and/or targeted teams and leaders.
- Maintain accurate and timely records, and risk /compliance systems necessary to support the effective operation and reporting of relevant activities and their progress. This include regularly reporting to management.
- Work collaboratively with regional and global compliance team members and cross-functional project teams, as needed, to effectively implement compliance initiatives.
- Provide guidance, advice and coordinate with local gatekeeper functions (e.g., Finance, Legal and Human Resources teams, etc.) and business teams, to monitor the performance of the Compliance program in particularly relating to ethics, business conduct and regulatory compliance matters.
- Keep abreast of developments in laws and regulations, industry trends and risks and best practices.
- Set up and conduct regular compliance updates and reviews with local management (eg quarterly compliance board meetings and develop an ANZ risk register).
- Oversee and project manage corrective actions following compliance related audits.
- **2) Act as the Group’s Privacy Officer for ANZ and support deployment of the EssilorLuxottica data protection program in ANZ (40%)**
- Deploy standard policies, practices/SOPs and documents (generally and specific to business units), customizing global/regional policies, procedures, as needed (eg information handling policies and use of technology and information security policies).
- Engage with stakeholders to project manage and coordinate compliance activity (key stakeholders include Legal, IT Security and other business units leaders such as IT, Marketing / CRM and e-commerce) and the Company’s response to suspected data breaches.
- Conduct assessments and review to identify areas of risks and possible exposure of entities within the designated countries.
- Support the implementation of the Group data protection program, including but not limited to, appropriate introductory and awareness training and communication, and calibrate the program and policies locally to reflect local requirements as needed.
- Coordinate the handling of internal and external privacy enquiries, privacy complaints, and requests for access to, correction of, personal information and the Company’s response to suspected data breaches and their notification to OAIC and data owners.
- Prepare a data privacy risk register, monitoring the adequacy of existing controls