Privacy Operations Manager

Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to operationalize our global privacy program across Thomson Reuters. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations including regional (GDPR, NIS2, Digital Services/Markets Act), federal (PIPEDA, UK GDPR), U.S. State (CCPA), provincial (Quebec’s Law 25) and sectoral (HIPAA, GLBA, Fed Ramp, CJIS, etc.)

privacy regulation, and other applicable data protection laws. This role will also manage the operational aspects of cyber incident management, coordinate incident response activities and ensuring effective execution of the organization's cyber incident response processes. The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and driveautomation,leveragingtheuseofAIandothertools tooperationalize privacy compliance across products, services and functions.

About the Role In this opportunity as a Privacy Operations Manager, you will lead:

Privacy Program Management Oversee the day-to-day operations of Thomson Reuters' global privacy program

Implement privacy policies, procedures, and operational frameworks

Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs)
Coordinate responses to data subject access requests (DSARs) and ensure timely resolution

Track and report on privacy program metrics and KPIsPrivacy Compliance & Risk Management Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others

Build out and maintain data inventory, and data mapping initiatives

Identify privacy risks and work with stakeholders to implement mitigation strategies

Support privacy incident response and breach notification processes

Conduct privacy audits and assessments of internal processes and third-party vendors

Cyber Incident Management Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications

Support cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication

Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators

Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents

Privacy-by-Design and Cross-Functional Collaboration Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle.

Serve as a privacy subject matter expert and advisor to business units

Facilitate privacy training and awareness programs for employees

Work with vendors and partners to ensure contractual privacy obligations are met Identify current sub-processor's and updating contractual documentation to reflect current state

Documentation & Reporting Maintain records of processing activities (ROPA) and privacy documentation

Prepare and maintain privacy metrics, dashboards and reports for leadership and…