Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to operationalize our global privacy program across Thomson Reuters. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations. The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and drive automation, leveraging the use of AI and other tools to operationalize privacy compliance across products, services and functions.

Responsibilities

Oversee the day-to-day operations of Thomson Reuters' global privacy program
Implement privacy policies, procedures, and operational frameworks
Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs)
Coordinate responses to data subject access requests (DSARs) and ensure timely resolution
Track and report on privacy program metrics and KPIs
Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others
Build out and maintain data inventory, and data mapping initiatives
Identify privacy risks and work with stakeholders to implement mitigation strategies
Support privacy incident response and breach notification processes
Conduct privacy audits and assessments of internal processes and third-party vendors
Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications
Support cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication
Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators
Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents
Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle.
Serve as a privacy subject matter expert and advisor to business units
Facilitate privacy training and awareness programs for employees
Work with vendors and partners to ensure contractual privacy obligations are met
Identify current sub-processor's and updating contractual documentation to reflect current state
Maintain records of processing activities (ROPA) and privacy documentation
Prepare and maintain privacy metrics, dashboards and reports for leadership and relevant stakeholders
Document privacy procedures and create operational playbooks
Support regulatory inquiries and audits
Lead, mentor, and develop a team of Privacy Operations Specialists, fostering a culture of accountability, continuous learning, and operational excellence.
Set clear performance expectations, conduct regular one-on-ones, and provide ongoing coaching to support individual growth and career development.
Collaborate cross-functionally with Legal, IT, Security, and Business teams to align privacy operations priorities, resolve escalations, and ensure the team has the resources and guidance needed to execute effectively.
Drive team efficiency by establishing standardized workflows, refining processes, and implementing best practices that scale with the organization's evolving privacy landscape.

Requirements

Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field
6-8 years of experience in a technical privacy, cybersecurity, or compliance role, preferably in a SaaS environment.
3-5 years of people management experience.
Relevant privacy and/or cybersecurity certification, such as IAPP’s Certified Information Privacy Professional credential (CIPM, CIPPT), Certified Information Systems Security Professional (CISSP).
Experience with privacy risk assessments from a technical perspective.
Advanced skills (3-5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management.
Strong knowledge of global privacy regulations (GDPR, CCPA, PIPEDA, etc.)
Ability to interpret legal and regulatory requirements into system-level controls.
Experience in advising product and technology teams on privacy obligations relating to the processing of sensitive data, including implementing privacy by design requirements.
Knowledge of data classification, retention, and lifecycle management.
Experience managing privacy operations in a large, complex organization
Proven ability to manage multiple projects and priorities simultaneously
Excellent communication skills with ability to explain complex privacy concepts to non-technical audiences
Strong analytical and problem-solving capabilities
Experience with privacy management tools and technologies
Experience with automation tools (e.g., PowerBI, PowerAutomate) and AI/ML frameworks for compliance.
Experience with data governance tools, SIEM systems, and privacy-enhancing technologies (PETs).
Expert skills (5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management.
Proficiency in scripting and automation for compliance tasks/ privacy automation tools and technologies.
Knowledge of information security frameworks and practices
Project management certification or experience
Master's degree in legal studies or law degree.

Skills

Strategic thinking
Operational execution
Attention to detail
Organizational skills
Ability to work independently
Ability to work collaboratively across global teams
Adaptability to changing regulatory landscapes
Cultural sensitivity for working in a global environment
Technical aptitude for understanding data flows and systems

Location

Global

Work Type

Hybrid

Experience Level

6-8 years of experience in a technical privacy, cybersecurity, or compliance role
3-5 years of people management experience
Advanced skills (3-5+ years) configuring and managing OneTrust privacy management software
Expert skills (5+ years) configuring and managing OneTrust privacy management software

Education Level

Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field
Master's degree in legal studies or law degree

Benefits

Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing

About the Company

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions.
We serve professionals across legal, tax, accounting, compliance, government, and media.
Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency.
Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments.
At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them.
Join us and help shape the industries that move society forward.

Equal Opportunity

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals.
To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law.
Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.