Privacy Operations Director, Senior Counsel

Thomson Reuters•Washington, DC

2d•$157,500 - $337,000•Hybrid

About The Position

As Privacy Operations Director, Senior Counsel at Thomson Reuters, you will lead global privacy operations and report directly to the Chief Privacy Officer, serving as their Chief of Staff. You will lead a team of privacy specialists and engineers, advise executives and the Board, and translate privacy law into technical controls that protect personal data across the company’s products and operations. This is a hybrid role based in Washington, DC, or Minneapolis/St. Paul, MN, with three days onsite per week. The role sets the direction for global privacy operations and runs the global privacy program, including strategic planning, operational roadmaps, policies and procedures, data subject access request responses, performance metrics, risk management, data visibility, product privacy, and cyber incident response. It also leads and develops the privacy operations team and partners with business, product, engineering, information security, IT, and legal teams. Thomson Reuters offers a comprehensive benefits package, work-life and career-development programs, and a hybrid work environment. The listed base compensation range is $181,400–$337,000 USD for specified eligible locations, and $157,500–$292,500 USD for other eligible US locations. The role may also be eligible for an annual bonus.

Requirements

Bachelor’s degree in law, information systems, computer science, cybersecurity, or a related legal or technical field, plus a Juris Doctor (J.D.) or a master’s degree in legal studies.
At least 8 years of combined experience in privacy law, technical privacy operations, and program management, including managing privacy operations in a large, complex organization.
At least 4 years of experience leading technical or legal teams, driving program strategy, and advising executives in a Chief of Staff or comparable capacity.
A relevant privacy or cybersecurity certification, such as CIPM, CIPT, or CISSP.
Strong knowledge of global privacy laws, including the EU GDPR, CCPA, and PIPEDA.
Hands-on experience conducting technical privacy risk assessments, with expertise in privacy management platforms such as OneTrust, automated data mapping, and privacy-enhancing technologies.
Experience advising product and technology teams on sensitive data and translating legal obligations into system-level controls for privacy by design, data classification, retention, and data lifecycle management.
Ability to manage competing priorities, resolve complex privacy problems across teams, and explain legal and technical issues clearly to executives and nontechnical audiences.

Nice To Haves

Experience combining legal counsel and technical privacy operations at an enterprise software, software-as-a-service, or data provider.
Experience using Power BI, Power Automate, scripting, or artificial intelligence and machine learning tools to improve compliance reporting or automate privacy workflows.
Experience with data governance tools, security information and event management systems, or information security frameworks.
Project management experience or certification.
Experience supporting a General Counsel or Chief Privacy Officer with strategic planning, budget management, and executive communications.

Responsibilities

Set the direction for global privacy operations; advise the Chief Privacy Officer, lead strategic initiatives, oversee budgets and resource allocation, and brief executives and the Board on program performance and risk.
Run the global privacy program by owning the operational roadmap, implementing privacy policies and procedures, overseeing responses to data subject access requests, and using performance metrics to improve operations.
Strengthen privacy risk management and data visibility by monitoring regulatory changes, leading privacy and data transfer impact assessments, overseeing audits and vendor reviews, and improving data inventories, automated data mapping, and records of processing activities.
Build privacy into products by partnering with Product, Engineering, Information Security, and Legal to translate obligations for sensitive data into privacy-by-design controls.
Support privacy training and help business teams meet contractual obligations when working with vendors and subprocessors.
Coordinate the privacy response to cyber incidents with Information Security, IT, Legal, and business teams; triage and escalate incidents, assess breach notification obligations, coordinate timely notifications when required, and improve response playbooks.
Lead and develop the privacy operations team by setting priorities and performance expectations, coaching privacy specialists and engineers, and helping business teams adopt consistent privacy practices.

Benefits

Flexible hybrid work arrangements, including work from anywhere for up to 8 weeks per year.
Flexible vacation and paid time off, sick and safe paid time off, and paid holidays, including two company-wide mental health days.
Access to the Headspace app and Employee Assistance Program.
Retirement savings plan with company match.
Tuition reimbursement.
Employee incentive programs and potential annual bonus.
Health, dental, vision, disability, and life insurance.
Parental leave and sabbatical leave.
Flexible Spending and Health Savings Accounts.
Fitness reimbursement.
Optional hospital, accident and sickness insurance, and optional life and AD&D insurance.
Group legal identity theft protection benefit.
Access to a 529 Plan and commuter benefits.
Adoption and surrogacy assistance.
Employee Stock Purchase Plan.
Two paid volunteer days off annually and opportunities for pro-bono consulting projects and ESG initiatives.
Resources for mental, physical, and financial wellbeing.