Privacy Operations Manager

Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to operationalize our global privacy program across Thomson Reuters. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations including regional (GDPR, NIS2, Digital Services/Markets Act), federal (PIPEDA, UK GDPR), U.S. State (CCPA), provincial (Quebec’s Law 25) and sectoral (HIPAA, GLBA, FedRamp, CJIS, etc.) privacy regulation, and other applicable data protection laws. This role will also manage the operational aspects of cyber incident management, coordinate incident response activities and ensuring effective execution of the organization's cyber incident response processes. The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and driveautomation,leveragingtheuseofAIandothertools tooperationalize privacy compliance across products, services and functions.About the RoleIn this opportunity as a Privacy Operations Manager, you will lead:Privacy Program ManagementOversee the day-to-day operations of Thomson Reuters' global privacy programImplement privacy policies, procedures, and operational frameworksConduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs)Coordinate responses to data subject access requests (DSARs) and ensure timely resolutionTrack and report on privacy program metrics and KPIsPrivacy Compliance & Risk ManagementTrack and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among othersBuild out and maintain data inventory, and data mapping initiativesIdentify privacy risks and work with stakeholders to implement mitigation strategiesSupport privacy incident response and breach notification processesConduct privacy audits and assessments of internal processes and third-party vendorsCyber Incident ManagementSupport the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implicationsSupport cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communicationSupport legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulatorsMaintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidentsPrivacy-by-Design and Cross-Functional CollaborationPartner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle.Serve as a privacy subject matter expert and advisor to business unitsFacilitate privacy training and awareness programs for employeesWork with vendors and partners to ensure contractual privacy obligations are metIdentify current sub-processor's and updating contractual documentation to reflect current stateDocumentation & ReportingMaintain records of processing activities (ROPA) and privacy documentationPrepare and maintain privacy metrics, dashboards and reports for leadership and relevant stakeholdersDocument privacy procedures and create operational playbooksSupport regulatory inquiries and auditsTeam Leadership & ManagementLead, mentor, and develop a team of Privacy Operations Specialists, fostering a culture of accountability, continuous learning, and operational excellence.Set clear performance expectations, conduct regular one-on-ones, and provide ongoing coaching to support individual growth and career development.Collaborate cross-functionally with Legal, IT, Security, and Business teams to align privacy operations priorities, resolve escalations, and ensure the team has the resources and guidance needed to execute effectively.Drive team efficiency by establishing standardized workflows, refining processes, and implementing best practices that scale with the organization's evolving privacy landscape.About YouYou’re a fit for the role of Privacy Operations Manager if your background includes:Required:Bachelor’s degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field6-8 yearsofexperienceinatechnicalprivacy,cybersecurity,orcompliancerole,preferablyinaSaaSenvironment. Including 3-5 years of people management.Relevantprivacy and/or cybersecurity certification, such as IAPP’s Certified Information Privacy Professionalcredential(CIPM, CIPPT), Certified Information Systems Security Professional (CISSP).Experiencewithprivacyriskassessmentsfroma technical perspective.Advanced skills (3-5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management.Strong knowledge of global privacy regulations (GDPR, CCPA, PIPEDA, etc.)Abilitytointerpretlegalandregulatoryrequirementsintosystem-levelcontrols.Experiencein advising productand technology teams on privacy obligations relating to theprocessing of sensitivedata, including implementing privacy by design requirements.Knowledgeof dataclassification,retention, and lifecyclemanagement.Experience managing privacy operations in a large, complex organizationProven ability to manage multiple projects and priorities simultaneouslyExcellent communication skills with ability to explain complex privacy concepts to non-technical audiencesStrong analytical and problem-solving capabilitiesExperience with privacy management tools and technologiesPreferred:Experiencewithautomationtools(e.g.,PowerBI,PowerAutomate)andAI/MLframeworksforcompliance.Experiencewithdatagovernancetools,SIEMsystems,andprivacy-enhancingtechnologies(PETs).Expert skills (5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management.Proficiencyinscriptingandautomationforcompliancetasks/ privacy automation tools and technologies.Knowledge of information security frameworks and practicesProject management certification or experienceMaster's degree in legal studies or law degree.Skills & CompetenciesStrategic thinking with operational execution capabilitiesStrong attention to detail and organizational skillsAbility to work independently and collaboratively across global teamsAdaptability to changing regulatory landscapesCultural sensitivity for working in a global environmentTechnical aptitude for understanding data flows and systems#LI-KK1What’s in it For You Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.About UsThomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here.Learn more on how to protect yourself from fraudulent job postings here.More information about Thomson Reuters can be found on thomsonreuters.com.SummaryLocation: United Kingdom, LondonType: Full time