Pension Operations Lead in London

Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations including regional (GDPR, NIS2, Digital Services/Markets Act), federal (PIPEDA, UK GDPR), U. privacy regulation, and other applicable data protection laws.

The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and drive automation, leveraging the use of AI and other tools to operationalize privacy compliance across products, services and functions.

In this opportunity as a Privacy Operations Manager, you will lead:

• Privacy Program Management
  • Oversee the day-to-day operations of Thomson Reuters' global privacy program
  • Implement privacy policies, procedures, and operational frameworks
  • Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs), data protection impact assessments (DPIAs), transfer impact assessments (TIAs)
  • Coordinate responses to data subject access requests (DSARs) and ensure timely resolution
  • Track and report on privacy program metrics and KPIs
• Privacy Compliance & Risk Management
  • Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others
  • Build out and maintain data inventory, and data mapping initiatives
  • Identify privacy risks and work with stakeholders to implement mitigation strategies
  • Support privacy incident response and breach notification processes
  • Conduct privacy audits and assessments of internal processes and third-party vendors
• Cyber Incident Management
  • Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications
  • Support cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication
  • Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators
  • Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents
• Privacy-by-Design and Cross-Functional Collaboration
  • Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle
  • Serve as a privacy subject matter expert and advisor to business units
  • Facilitate privacy training and awareness programs for employees
  • Work with vendors and partners to ensure contractual privacy obligations are met
  • Identify current sub-processors and updating contractual documentation to reflect current state
• Documentation & Reporting
  • Maintain records of processing activities (ROPA) and privacy documentation
  • Prepare and maintain privacy metrics, dashboards and reports for leadership and relevant stakeholders
  • Document privacy procedures and create operational playbooks
  • Support regulatory inquiries and audits
• Team Leadership & Management
  • Lead, mentor, and develop a team of Privacy Operations Specialists, fostering a culture of accountability, continuous learning, and operational excellence
  • Set clear performance expectations, conduct regular one-on-ones, and provide ongoing coaching to support individual growth and career development
  • Collaborate cross-functionally with Legal, IT, Security, and Business teams to align privacy operations priorities, resolve escalations, and ensure the team has the resources and guidance needed to execute effectively

You're a fit for the role of Privacy Operations Manager if your background includes:

• Required:
  • Bachelor's degree in law, Information Systems, Computer Science, Cybersecurity, or related legal or technical field
  • 6-8 years of experience in a technical privacy, cybersecurity, or compliance role, preferably in a SaaS environment
  • Advanced skills (3-5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management
  • Experience managing privacy operations in a large, complex organization
  • Proven ability to manage multiple projects and priorities simultaneously
  • Excellent communication skills with ability to explain complex privacy concepts to non-technical audiences
  • Strong analytical and problem-solving capabilities
  • Experience with privacy management tools and technologies
• Preferred:
  • Experience with data governance tools, SIEM systems, and privacy-enhancing technologies (PETs)
  • Expert skills (5+ years) configuring and managing OneTrust privacy management software, including assessment automation, data inventory management, and DSAR workflow and consent management
  • Knowledge of information security frameworks and practices
  • Project management certification or experience
  • Master's degree in legal studies or law degree

Skills & Competencies

• Strategic thinking with operational execution capabilities
• Strong attention to detail and organizational skills
• Ability to work independently and collaboratively across global teams
• Adaptability to changing regulatory landscapes
• Cultural sensitivity for working in a global environment
• Technical aptitude for understanding data flows and systems

What's in it For You?

• Hybrid Work Model: We've adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
• Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset.
• Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow's challenges and deliver real-world solutions.
• Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
• Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more.
• Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.
• Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency.

About Us

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media.