Assistant General Counsel, Privacy

Thomson Reuters Corporation•Eagan, MN

49d•$154,000 - $286,000•Hybrid

About The Position

We are seeking an Assistant General Counsel, Privacy to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to lead privacy compliance for Thomson Reuters globally, with a primary focus on Canadian and U.S. privacy laws and global cybersecurity regulations. The successful candidate will be a strategic legal advisor who navigates complex regulatory landscapes while enabling business growth and innovation through privacy-by-design principles. About the Role In this opportunity as Assistant General Counsel, Privacy, you will provide strategic legal counsel and operational leadership across all aspects of global privacy and cybersecurity compliance, including: Strategic Legal Counsel & Program Leadership Lead a team of attorneys and privacy professionals Partner with executive leadership and business segments to integrate privacy considerations into business strategy and product development Monitor evolving privacy laws and regulations globally, assessing organizational impact and translating legal requirements into business guidance and operational execution Serve as subject matter expert on specialized legal issues unique to data privacy and cybersecurity Privacy Program Management Assist in the design, maintenance, and continuous enhancement of the Thomson Reuters Privacy Program, including drafting privacy policies and establishing governance frameworks Conduct comprehensive privacy risk assessments for products, systems, and operations, providing risk-mitigation counseling Advise on privacy-by-design principles, review Privacy Impact Assessments (PIAs), and conduct risk assessments for new products, services, and business initiatives Assess privacy implications of AI, machine learning, and other emerging technologies Cross-Functional Collaboration Work closely with product teams, business lines, Information Security, Data & Analytics, and other internal functions to identify and address privacy risks Lead and/or serve as subject matter expert for privacy due diligence and integration activities as part of mergers, acquisitions, and divestitures Develop and manage procedures for vetting and auditing vendors and third parties on privacy compliance requirements Assist contracting teams in drafting, maintaining, and negotiating data protection agreements Incident Response & Compliance Provide legal counsel to cybersecurity teams during privacy incident investigations and breach response, ensuring investigations are conducted and documented appropriately to minimize risks, protect individual privacy, and fulfill legal obligations Oversee consumer/data subject rights (DSR) request processes in collaboration with the Privacy Office Support relationships with regulatory authorities during investigations or inquiries

Requirements

Juris Doctor from an accredited law school
Active bar admission in at least one U.S. state (Canadian bar admission a plus)
10+ years of progressive privacy and data protection legal experience
International privacy experience, particularly with Canadian and U.S. privacy laws
Experience in fast-paced, technology-driven organizations
Proven track record advising on enterprise-wide privacy programs
Experience with incident response and regulatory interactions
Strong people leadership experience with ability to build and develop teams
Exceptional communication skills with ability to translate complex legal terms into business requirements for diverse audiences
Strategic thinking with ability to provide practical, risk-balanced counsel that enables business objectives
Deep understanding of global privacy laws (GDPR, CCPA, PIPEDA, LGPD, etc.)
Knowledge of information security principles, cybersecurity laws, and data processing operations
Strong sense of urgency and results-orientation
Proven ability to lead, motivate, influence, and guide cross-functional teams and direct reports
Strong interpersonal skills, and fosters a culture of belonging that enables everyone to contribute to their full potential
Ethical, with the ability to handle confidential information with discretion
Demonstrates a commitment to the company's vision, mission, and values

Nice To Haves

Background in management consulting or law firm advisory services preferred
Professional privacy certification (CIPP/US, CIPP/C, CIPP/E, CIPM, CIPT, or equivalent)
Experience advising content-driven AI companies
Experience managing privacy requirements as a service provider to various regulated entities (healthcare/HIPAA, financial services/GLBA, etc.)
Technical background in data architecture or cybersecurity

Responsibilities

Lead a team of attorneys and privacy professionals
Partner with executive leadership and business segments to integrate privacy considerations into business strategy and product development
Monitor evolving privacy laws and regulations globally, assessing organizational impact and translating legal requirements into business guidance and operational execution
Serve as subject matter expert on specialized legal issues unique to data privacy and cybersecurity
Assist in the design, maintenance, and continuous enhancement of the Thomson Reuters Privacy Program, including drafting privacy policies and establishing governance frameworks
Conduct comprehensive privacy risk assessments for products, systems, and operations, providing risk-mitigation counseling
Advise on privacy-by-design principles, review Privacy Impact Assessments (PIAs), and conduct risk assessments for new products, services, and business initiatives
Assess privacy implications of AI, machine learning, and other emerging technologies
Work closely with product teams, business lines, Information Security, Data & Analytics, and other internal functions to identify and address privacy risks
Lead and/or serve as subject matter expert for privacy due diligence and integration activities as part of mergers, acquisitions, and divestitures
Develop and manage procedures for vetting and auditing vendors and third parties on privacy compliance requirements
Assist contracting teams in drafting, maintaining, and negotiating data protection agreements
Provide legal counsel to cybersecurity teams during privacy incident investigations and breach response, ensuring investigations are conducted and documented appropriately to minimize risks, protect individual privacy, and fulfill legal obligations
Oversee consumer/data subject rights (DSR) request processes in collaboration with the Privacy Office
Support relationships with regulatory authorities during investigations or inquiries

Benefits

Hybrid Work Model: We've adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.
Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow's challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.
Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.
Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
Making a Real-World Impact:â We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.
In the United States, Thomson Reuters offers a comprehensive benefits package to our employees. Our benefit package includes market competitive health, dental, vision, disability, and life insurance programs, as well as a competitive 401k plan with company match. In addition, Thomson Reuters offers market leading work life benefits with competitive vacation, sick and safe paid time off, paid holidays (including two company mental health days off), parental leave, sabbatical leave. These benefits meet or exceeds the requirements of paid time off in accordance with any applicable state or municipal laws. Finally, Thomson Reuters offers the following additional benefits: optional hospital, accident and sickness insurance paid 100% by the employee; optional life and AD&D insurance paid 100% by the employee; Flexible Spending and Health Savings Accounts; fitness reimbursement; access to Employee Assistance Program; Group Legal Identity Theft Protection benefit paid 100% by employee; access to 529 Plan; commuter benefits; Adoption & Surrogacy Assistance; Tuition Reimbursement; and access to Employee Stock Purchase Plan.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume