Privacy Operations Lead​/Senior Counsel

Thomson Reuters is seeking a high-caliber Senior Legal Counsel & Privacy Operations Lead to join the General Counsel’s Office. Reporting directly to the Chief Privacy Officer (CPO), this role serves as both the technical operations leader and a trusted Chief of Staff to the CPO. You will blend deep legal and regulatory expertise with hands‑on technical privacy operations, while providing strategic governance, operational cadence, and administrative oversight across Thomson Reuters’ global privacy program.

In this opportunity as a Privacy Operations Lead / Senior Counsel, you will lead:

• Act as the CPO’s right-hand strategic partner and advisor, driving the execution of high-priority strategic initiatives across the global privacy office.
• Provide overarching administrative governance, including tracking program budgets, vendor management, resource allocation, and team operating rhythms.
• Prepare executive‑level briefings, Board of Directors presentations, and cross‑functional reporting on privacy program maturity, risks, and compliance posture.
• Lead cross‑functional alignment between the CPO’s office, General Counsel, Information Security (CISO), Product, and business unit leaders.

• Drive end‑to‑end program governance, operational roadmap planning, and scalable execution for Thomson Reuters’ global privacy program.
• Oversee the day‑to‑day operations of Thomson Reuters’ global privacy program
• Implement privacy policies, procedures, and operational frameworks
• Conduct or facilitate the conduct of risk assessments, including privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs)
• Coordinate responses to data subject access requests (DSARs) and ensure timely resolution
• Track and report on privacy program metrics and KPIs

• Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others
• Build out and maintain data inventory, and data mapping automation initiatives Identify privacy risks and work with stakeholders to implement mitigation strategies
• Support privacy incident response and breach notification processes
• Conduct privacy audits and assessments of internal processes and third‑party vendors

• Support the day‑to‑day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications
• Support cross‑functional co‑ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication
• Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators
• Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents

• Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy‑by‑design principles and guidance into the product development cycle.
• Serve as a privacy subject matter expert and advisor to business units
• Facilitate privacy training and awareness programs for employees
• Work with vendors and partners to ensure contractual privacy obligations are met
• Identify current sub‑processor's and updating contractual documentation to reflect current state

• Maintain records of processing activities (ROPA) and privacy documentation
• Prepare and maintain…