# Senior Legal Counsel & Privacy Operations Lead **Company**: Thomson Reuters **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: 203,000 PLN - 377,000 PLN **Category**: Legal **Industry**: Technology **Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Poland-Gdansk/Privacy-Operations-Manager_JREQ202656?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_66edd131-fa2 ## Description Thomson Reuters is seeking a high-caliber Senior Legal Counsel & Privacy Operations Lead to join the General Counsel’s Office. Reporting directly to the Chief Privacy Officer (CPO), this role serves as both the technical operations leader and a trusted Chief of Staff to the CPO. **Job Summary:** In this opportunity as a Privacy Operations Lead / Senior Counsel, you will lead the execution of high-priority strategic initiatives across the global privacy office, provide overarching administrative governance, and drive end-to-end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program. **Key Responsibilities:** - Act as the CPO’s right-hand strategic partner and advisor - Provide overarching administrative governance, including tracking program budgets, vendor management, resource allocation, and team operating rhythms - Prepare executive-level briefings, Board of Directors presentations, and cross-functional reporting on privacy program maturity, risks, and compliance posture - Drive end-to-end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program - Oversee the day-to-day operations of Thomson Reuters’ global privacy program - Implement privacy policies, procedures, and operational frameworks - Conduct or facilitate the conduct of risk assessments, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs) - Coordinate responses to data subject access requests (DSARs) and ensure timely resolution - Track and report on privacy program metrics and KPIs - Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others - Build out and maintain data inventory, and data mapping automation initiatives - Support privacy incident response and breach notification processes - Conduct privacy audits and assessments of internal processes and third-party vendors - Support the day-to-day operational execution of the cyber incident response program - Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle - Serve as a privacy subject matter expert and advisor to business units - Facilitate privacy training and awareness programs for employees - Work with vendors and partners to ensure contractual privacy obligations are met - Maintain records of processing activities (ROPA) and privacy documentation - Prepare and maintain privacy metrics, dashboards and reports for leadership and relevant stakeholders - Document privacy procedures and create operational playbooks - Support regulatory inquiries and audits - Provide strategic direction, mentorship, and operational management to privacy operations specialists, privacy engineers and cross-functional privacy champions **Requirements:** - Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field - 8-10+ years of combined experience in privacy law, technical privacy operations, and program management - 4-6+ years leading technical/legal teams, driving program strategy, and serving in an executive advisory or Chief of Staff capacity - Relevant privacy and/or cybersecurity certification, such as IAPP’s Certified Information Privacy Professional credential (CIPM, CIPPT), Certified Information Systems Security Professional (CISSP) - Experience with privacy risk assessments from a technical perspective - Subject matter expertise in privacy tech stacks (OneTrust, PETs, automated data mapping) paired with the ability to translate technical architecture into actionable legal guidance - Strong knowledge of global privacy regulations (GDPR, CCPA, PIPEDA, etc.) - Ability to interpret legal and regulatory requirements into system-level controls - Experience in advising product and technology teams on privacy obligations relating to the processing of sensitive data, including implementing privacy by design requirements - Knowledge of data classification, retention, and lifecycle management - Experience managing privacy operations in a large, complex organization - Proven ability to manage multiple projects and priorities simultaneously - Excellent communication skills with ability to explain complex privacy concepts to non-technical audiences - Strong analytical and problem-solving capabilities - Experience with privacy management tools and technologies **Benefits:** - Hybrid Work Model - Flexibility & Work-Life Balance - Career Development and Growth - Industry Competitive Benefits - Culture - Social Impact - Making a Real-World Impact ## Skills ### Required - privacy law - technical privacy operations - program management - GDPR - CCPA - PIPEDA - cybersecurity - data protection - information security - privacy management tools ### Nice to have - automation tools - AI/ML frameworks - data governance tools - SIEM systems - privacy-enhancing technologies - scripting and automation - project management certification --- Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Poland-Gdansk/Privacy-Operations-Manager_JREQ202656?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)