{bc}
indeed

Privacy Operations Analyst

Thomson Reuters
London, GBR
Full-time
Senior
Onsite
Discovered 5 days ago
Privacy operationsUK GDPR and EU GDPRCCPA/CPRAPIPEDAPrivacy impact assessments (PIA/DPIA)Transfer impact assessments

Full Job Posting

Privacy program management and reporting

  • Structure privacy operations in Azure DevOps, Jira, or similar tools, mapping work items and fields to privacy concepts such as jurisdiction, data type, and risk tier.
  • Maintain KPI dashboards and reports, including DSAR SLA compliance, assessment backlog age, and incident response times.
  • Track cross-functional privacy work involving Legal, Security, and Product, and flag bottlenecks and at-risk items.
  • Coordinate data subject rights requests to meet statutory timelines across jurisdictions.

Assessments, data mapping, and compliance

  • Conduct and document PIAs, DPIAs, and TIAs for products, features, and vendor engagements.
  • Support risk-based automated assessment workflows and escalate high-risk triggers for senior review.
  • Help reduce manual scoring and risk-rating effort while identifying work requiring human review.
  • Maintain ROPA records linked to data mapping and assessment findings; support data discovery and data-flow mapping.
  • Monitor data maps for drift as systems or vendors change and reconcile them against discovery outputs.
  • Track privacy regulation changes and support compliance with applicable regimes.
  • Support privacy incident response, breach notifications, documentation, breach registers, audits, and vendor assessments.

Collaboration and governance

  • Triage privacy inquiries and partner with Legal, Information Security, IT, Product, and Business teams on privacy-by-design.
  • Support privacy training delivery and tracking, vendor reviews, and updates to sub-processor documentation.
  • Contribute to privacy policies, procedures, and operational playbooks; maintain leadership metrics and reports.
  • Provide guidance and quality review to junior privacy operations team members.

Required qualifications

  • Five to seven years of experience in privacy, compliance, legal operations, or a similar role supporting a global or multi-jurisdictional privacy program.
  • Working knowledge of UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA, and other applicable global data subject rights frameworks.
  • Hands-on experience with OneTrust, TrustArc, or similar privacy platforms for DSAR, PIA/DPIA, and data mapping workflows.
  • Experience using Azure DevOps, Jira, or similar tools for privacy operations tracking and KPI reporting.
  • Exposure to or experience with privacy workflow automation, such as Power Automate or API integrations, is requested as experience or exposure.
  • Understanding of data discovery and data mapping techniques for maintaining ROPA records.
  • Attention to detail, organizational skills, deadline management across time zones, and clear written and verbal communication.

Preferred qualifications

  • CIPP/E, CIPP/US, or CIPM certification, or actively pursuing one.
  • Experience building custom ADO/Jira work item types and boards, and Power BI or analytics dashboards for privacy KPI reporting.
  • The supplied description ends during the preferred qualifications, so further details are unavailable.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Thomson Reuters