Description
Thomson Reuters is seeking a high-caliber Senior Legal Counsel & Privacy Operations Lead to join the General Counsel’s Office. Reporting directly to the Chief Privacy Officer (CPO), this role serves as both the technical operations leader and a trusted Chief of Staff to the CPO.
Job Summary: In this opportunity as a Privacy Operations Lead / Senior Counsel, you will lead the execution of high-priority strategic initiatives across the global privacy office, provide overarching administrative governance, and drive end-to-end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program.
Key Responsibilities:
- Act as the CPO’s right-hand strategic partner and advisor
- Provide overarching administrative governance, including tracking program budgets, vendor management, resource allocation, and team operating rhythms
- Prepare executive-level briefings, Board of Directors presentations, and cross-functional reporting on privacy program maturity, risks, and compliance posture
- Drive end-to-end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program
- Oversee the day-to-day operations of Thomson Reuters’ global privacy program
- Implement privacy policies, procedures, and operational frameworks
- Conduct or facilitate the conduct of risk assessments, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs)
- Coordinate responses to data subject access requests (DSARs) and ensure timely resolution
- Track and report on privacy program metrics and KPIs
- Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others
- Build out and maintain data inventory, and data mapping automation initiatives
- Support privacy incident response and breach notification processes
- Conduct privacy audits and assessments of internal processes and third-party vendors
- Support the day-to-day operational execution of the cyber incident response program
- Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle
- Serve as a privacy subject matter expert and advisor to business units
- Facilitate privacy training and awareness programs for employees
- Work with vendors and partners to ensure contractual privacy obligations are met
- Maintain records of processing activities (ROPA) and privacy documentation
- Prepare and maintain privacy metrics, dashboards and reports for leadership and relevant stakeholders
- Document privacy procedures and create operational playbooks
- Support regulatory inquiries and audits
- Provide strategic direction, mentorship, and operational management to privacy operations specialists, privacy engineers and cross-functional privacy champions
Requirements:
- Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field
- 8-10+ years of combined experience in privacy law, technical privacy operations, and program management
- 4-6+ years leading technical/legal teams, driving program strategy, and serving in an executive advisory or Chief of Staff capacity
- Relevant privacy and/or cybersecurity certification, such as IAPP’s Certified Information Privacy Professional credential (CIPM, CIPPT), Certified Information Systems Security Professional (CISSP)
- Experience with privacy risk assessments from a technical perspective
- Subject matter expertise in privacy tech stacks (OneTrust, PETs, automated data mapping) paired with the ability to translate technical architecture into actionable legal guidance
- Strong knowledge of global privacy regulations (GDPR, CCPA, PIPEDA, etc.)
- Ability to interpret legal and regulatory requirements into system-level controls
- Experience in advising product and technology teams on privacy obligations relating to the processing of sensitive data, including implementing privacy by design requirements
- Knowledge of data classification, retention, and lifecycle management
- Experience managing privacy operations in a large, complex organization
- Proven ability to manage multiple projects and priorities simultaneously
- Excellent communication skills with ability to explain complex privacy concepts to non-technical audiences
- Strong analytical and problem-solving capabilities
- Experience with privacy management tools and technologies
Benefits:
- Hybrid Work Model
- Flexibility & Work-Life Balance
- Career Development and Growth
- Industry Competitive Benefits
- Culture
- Social Impact
- Making a Real-World Impact