Privacy Operations Director, Senior Counsel

Thomson Reuters•Eagan, MN

18h•Hybrid

About The Position

As Privacy Operations Director, Senior Counsel at Thomson Reuters, you will lead global privacy operations and report directly to the Chief Privacy Officer, serving as their Chief of Staff. You will lead a team of privacy specialists and engineers, advise executives and the Board, and translate privacy law into technical controls that protect personal data across the company’s products and operations. The role is hybrid, based in Washington, DC, or Minneapolis/St. Paul, MN, with three days onsite per week. You will set the direction for global privacy operations, lead the operational roadmap, and oversee policies, procedures, performance metrics, budgets, and resource allocation. The role includes strengthening privacy risk management and data visibility, embedding privacy-by-design controls in products, coordinating privacy responses to cyber incidents, and developing the privacy operations team. The position requires a bachelor’s degree in a legal or technical field plus a J.D. or master’s degree in legal studies, at least eight years of combined relevant experience, at least four years leading teams and advising executives, and a relevant privacy or cybersecurity certification. The role may also be eligible for an annual bonus based on enterprise and individual performance. Compensation is listed as $181,400–$337,000 for certain eligible locations and $157,500–$292,500 for other eligible U.S. locations, with actual base pay depending on factors including knowledge, skills, experience, and internal equity.

Requirements

Bachelor’s degree in law, information systems, computer science, cybersecurity, or a related legal or technical field, plus a J.D. or master’s degree in legal studies.
At least 8 years of combined experience in privacy law, technical privacy operations, and program management, including managing privacy operations in a large, complex organization.
At least 4 years of experience leading technical or legal teams, driving program strategy, and advising executives in a Chief of Staff or comparable capacity.
Relevant privacy or cybersecurity certification, such as CIPM, CIPT, or CISSP.
Strong knowledge of global privacy laws, including GDPR, CCPA, and PIPEDA.
Hands-on experience conducting technical privacy risk assessments, with expertise in privacy management platforms such as OneTrust, automated data mapping, and privacy-enhancing technologies.
Experience advising product and technology teams on sensitive data and translating legal obligations into system-level controls for privacy by design, data classification, retention, and data lifecycle management.
Ability to manage competing priorities, resolve complex privacy problems across teams, and clearly explain legal and technical issues to executives and nontechnical audiences.

Nice To Haves

Experience combining legal counsel and technical privacy operations at an enterprise software, software-as-a-service, or data provider.
Experience using Power BI, Power Automate, scripting, or artificial intelligence and machine learning tools to improve compliance reporting or automate privacy workflows.
Experience with data governance tools, security information and event management systems, or information security frameworks.
Project management experience or certification.
Experience supporting a General Counsel or Chief Privacy Officer with strategic planning, budget management, and executive communications.

Responsibilities

Set the direction for global privacy operations; advise the Chief Privacy Officer, lead strategic initiatives, oversee budgets and resource allocation, and brief executives and the Board on program performance and risk.
Own the global privacy program’s operational roadmap, implement privacy policies and procedures, oversee data subject access request responses, and use performance metrics to improve operations.
Monitor regulatory changes; lead privacy and data-transfer impact assessments; oversee audits and vendor reviews; and improve data inventories, automated data mapping, and records of processing activities.
Partner with Product, Engineering, Information Security, and Legal to translate obligations for sensitive data into privacy-by-design controls.
Support privacy training and help business teams meet contractual obligations when working with vendors and subprocessors.
Coordinate privacy responses to cyber incidents with Information Security, IT, Legal, and business teams; triage and escalate incidents, assess breach notification obligations, coordinate required notifications, and improve response playbooks.
Lead and develop privacy operations specialists and engineers by setting priorities and performance expectations, coaching team members, and helping business teams adopt consistent privacy practices.

Benefits

Flexible vacation and flexible work arrangements, including work from anywhere for up to 8 weeks per year.
Two company-wide Mental Health Days off annually and access to the Headspace app.
Retirement savings and a competitive 401(k) plan with company match.
Tuition reimbursement.
Employee incentive programs and a possible annual bonus based on enterprise and individual performance.
Resources for mental, physical, and financial wellbeing, including fitness reimbursement and access to an Employee Assistance Program.
Health, dental, vision, disability, and life insurance programs.
Paid holidays, sick and safe paid time off, parental leave, and sabbatical leave.
Two paid volunteer days off annually and opportunities to participate in pro-bono consulting projects and ESG initiatives.
Optional hospital, accident and sickness insurance; optional life and AD&D insurance; Flexible Spending and Health Savings Accounts; group legal and identity theft protection; access to a 529 Plan; commuter benefits; adoption and surrogacy assistance; and access to an Employee Stock Purchase Plan.