Thomson Reuters
Privacy Operations Lead / Senior Counsel
London
Posted 22 days ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Senior Legal Counsel & Privacy Operations Lead
Thomson Reuters is seeking a high-caliber Senior Legal Counsel & Privacy Operations Lead to join the General Counsel’s Office. Reporting directly to the Chief Privacy Officer (CPO), this role serves as both the technical operations leader and a trusted Chief of Staff to the CPO. You will blend deep legal and regulatory expertise with hands-on technical privacy operations, while providing strategic governance, operational cadence, and administrative oversight across Thomson Reuters’ global privacy program.
About The Role
In this opportunity as a Privacy Operations Lead / Senior Counsel, you will lead:
Chief of Staff & Strategic Program Oversight
- Act as the CPO’s right-hand strategic partner and advisor, driving the execution of high-priority strategic initiatives across the global privacy office.
- Provide overarching administrative governance, including tracking program budgets, vendor management, resource allocation, and team operating rhythms.
- Prepare executive-level briefings, Board of Directors presentations, and cross-functional reporting on privacy program maturity, risks, and compliance posture.
- Lead cross-functional alignment between the CPO’s office, General Counsel, Information Security (CISO), Product, and business unit leaders.
Privacy Program Management
- Drive end-to-end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program.
- Oversee the day-to-day operations of Thomson Reuters’ global privacy program.
- Implement privacy policies, procedures, and operational frameworks.
- Conduct or facilitate the conduct of risk assessments, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs).
- Coordinate responses to data subject access requests (DSARs) and ensure timely resolution.
- Track and report on privacy program metrics and KPIs.
Privacy Compliance & Risk Management
- Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others.
- Build out and maintain data inventory, and data mapping automation initiatives.
- Identify privacy risks and work with stakeholders to implement mitigation strategies.
- Support privacy incident response and breach notification processes.
- Conduct privacy audits and assessments of internal processes and third-party vendors.
Cyber Incident Management
- Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications.
- Support cross-functional coordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication.
- Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators.
- Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents.
Privacy-by-Design and Cross-Functional Collaboration
- Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle.
- Serve as a privacy subject matter expert and advisor to business units.
- Facilitate privacy training and awareness programs for employees.
- Work with vendors and partners to ensure contractual privacy obligations are met.
- Identify current sub-processor's and updating contractual documentation to reflect current state.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Documentation & Reporting
- Maintain records of processing activities (ROPA) and privacy documentation.
- Prepare and maintain privacy metrics, dashboards, and reports for leadership and relevant stakeholders.
- Document privacy procedures and create operational playbooks.
- Support regulatory inquiries and audits.
Team Leadership & Management
- Provide strategic direction, mentorship, and operational management to privacy operations specialists, privacy engineers, and cross-functional privacy champions.
- Set clear performance expectations, conduct regular one-on-ones, and provide ongoing coaching to support individual growth and career development.
- Collaborate cross-functionally with Legal, IT, Security, and Business teams to align privacy operations priorities, resolve escalations, and ensure the team has the resources and guidance needed to execute effectively.
- Drive team efficiency by establishing standardized workflows, refining processes, and implementing best practices that scale with the organization’s evolving privacy landscape.
About You
You’re a fit for the role of Privacy Operations Lead / Senior Counsel if your background includes:
Required
- Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field.
- Juris Doctor (J.D.) or Master’s degree in legal studies.
- 8-10+ years of combined experience in privacy law, technical privacy operations, and program management, preferably in a SaaS environment.
- 4-6+ years leading technical/legal teams, driving program strategy, and serving in an executive advisory or Chief of Staff capacity.
- Relevant privacy and/or cybersecurity certification, such as IAPP’s Certified Information Privacy Professional credential (CIPM, CIPPT), Certified Information Systems Security Professional (CISSP).
- Experience with privacy risk assessments from a technical perspective.
- Subject matter expertise in privacy tech stacks (OneTrust, PETs, automated data mapping) paired with the ability to translate technical architecture into actionable legal guidance.
- Strong knowledge of global privacy regulations (GDPR, CCPA, PIPEDA, etc.)
- Ability to interpret legal and regulatory requirements into system-level controls.
- Experience in advising product and technology teams on privacy obligations relating to the processing of sensitive data, including implementing privacy by design requirements.
- Knowledge of data classification, retention, and lifecycle management.
- Experience managing privacy operations in a large, complex organization.
- Proven ability to manage multiple projects and priorities simultaneously.
- Excellent communication skills with ability to explain complex privacy concepts to non-technical audiences.
- Strong analytical and problem-solving capabilities.
- Experience with privacy management tools and technologies.
Preferred
- Experience with automation tools (e.g., PowerBI, PowerAutomate) and AI/ML frameworks for compliance.
- Experience with data governance tools, SIEM systems, and privacy-enhancing technologies (PETs).
- Proficiency in scripting and automation for compliance tasks/privacy automation tools and technologies.
- Knowledge of information security frameworks and practices.
- Project management certification or experience.
- Experience operating within a dual legal/technical capability at an enterprise software or data provider.
- Proven track record supporting a General Counsel or Chief Privacy Officer with strategic planning, budget management, and executive communications.
Skills & Competencies
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Strategic thinking with operational execution capabilities.
- Strong attention to detail and organizational skills.
- Ability to work independently and collaboratively across global teams.
- Adaptability to changing regulatory landscapes.
- Cultural sensitivity for working in a global environment.
- Technical aptitude for understanding data flows and systems.
What’s in it For You?
- Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
- Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.
- Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.
- Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
- Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.
- Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
- Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.
About Us
Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.
We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.
As a global business, we rely on the unique backgrounds, perspectives,
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location