{"id":3302483,"url":"https://alion.io/job/thomson-reuters-privacy-operations-engineer","title":"Privacy Operations Engineer","company":{"id":1951,"name":"Thomson Reuters","domain":"thomsonreuters.com","url":"https://alion.io/company/thomson-reuters","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":102,"ghost_share":0.059,"stale_share":0.353,"repost_share":0.176,"time_to_fill_p50_days":25,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":117000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":500},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Collibra","optional":false},{"name":"GDPR","optional":false},{"name":"Jira","optional":false},{"name":"Power Automate","optional":false},{"name":"Power BI","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T05:13:36Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Job Description\nThe Privacy Operations Engineer bridges privacy compliance and technical implementation, architecting, building, and maintaining the tooling, automation, and data infrastructure that powers the company's global privacy program across UK/EU, US, APAC, and other regions. This role works closely with engineering and product teams to operationalize privacy-by-design and privacy-by-default requirements, and owns the technical backbone connecting privacy management platforms (e.g., OneTrust), work-management systems (e.g., Azure DevOps, Jira), and the organization's broader data and cloud infrastructure. This is a hands-on engineering role requiring both strong technical depth and working knowledge of global privacy regulatory concepts.\nKey Responsibilities\n Privacy Automation EngineeringDesign, build, and maintain automation for privacy operations workflows, including data subject rights fulfillment, data discovery, data mapping, and privacy assessment triggering.\nBuild and maintain API and Power Automate integrations between privacy management platforms (e.g., OneTrust) and internal systems (ticketing/ADO/Jira, identity, data stores), including field mapping, assignment logic, bi-directional status sync, and error handling/logging so systems do not drift apart.\nImplement risk-based conditional logic and trigger workflows for privacy assessments (PIAs/DPIAs/TIAs) tied to intake or procurement systems, including escalation paths for high-risk triggers and governance/audit trails over the trigger rules themselves.\nDesign and maintain automated redaction and exception-flagging pipelines (e.g., keyword/pattern matching, ML classifiers) for DSAR fulfillment, ensuring a mandatory human-review checkpoint before release and maintaining an audit log of redaction decisions.\n\nData Mapping & ROPA Infrastructure\nBuild and maintain an automated, event-driven data flow inventory and data mapping pipeline, tied to system/vendor intake and procurement processes rather than periodic manual surveys.\nBuild and maintain integrations with data discovery and classification tooling (e.g., OneTrust Data Discovery, BigID, Collibra, AWS Macie, Azure Purview, database crawlers) to automatically feed classifications and data flows into ROPA records.\nImplement drift-detection mechanisms that reconcile ROPA records against discovery/mapping tool outputs, and support metrics such as percentage of ROPA records reviewed within a defined window.\nSupport technical aspects of privacy impact assessments, including data flow diagrams and system/architecture review.\nPrivacy-by-Design Engineering & Product Collaboration\nPartner with engineering and product teams to implement privacy-by-design and privacy-by-default controls within products and internal systems.\nAssist in the technical implementation of data retention and deletion requirements across structured and unstructured data sources.\nAdvise engineering teams on technical architecture considerations for new products and features from a privacy and data protection perspective.\nProgram Tooling, Reporting & Observability\nBuild and maintain KPI dashboards and reporting pipelines (e.g., ADO Analytics, Power BI) that translate raw work-item and automation data into executive-ready privacy program metrics (DSAR SLA compliance, assessment backlog, incident response times).\nMonitor and report on the health of privacy tooling and automated processes, troubleshooting integration or data-quality issues as they arise.\nMaintain governance over report definitions and automation/trigger rule changes so metrics and workflows remain consistent and trustworthy over time.\nDSAR & Assessment Automation at Scale\nDesign and maintain automated routing of DSAR tasks with data-owner mapping across multiple systems, SLA tracking tied to statutory deadlines, and tiered escalation as deadlines approach.\nBuild scalable automation and surge-capacity mechanisms (triage automation, templated responses) to support DSAR volume spikes, incorporating lessons learned into ongoing process improvements.\nSupport automation of assessment intake quality, including conditional required fields, real-time validation, and automated reminders to reduce incomplete submissions.\nRequired Qualifications\n5-7+ years of experience in a data engineering, software engineering, or technical privacy/compliance engineering role, ideally supporting privacy or compliance operations at a global or multinational organization.\nStrong proficiency in at least one programming/scripting language (e.g., Python, SQL) and demonstrated experience building and maintaining API integrations and automated workflows (e.g., Power Automate, custom scripts, middleware).\nHands-on experience building integrations between privacy management platforms (e.g., OneTrust, BigID, Collibra) and internal systems (ticketing/ADO/Jira, identity, data stores), including field mapping, assignment logic, and bi-directional status sync with error handling.\nExperience designing and maintaining automated data discovery and data mapping pipelines across structured and unstructured data sources (e.g., AWS Macie, Azure Purview, database crawlers) that feed ROPA records.\nExperience implementing risk-based conditional logic and trigger workflows for privacy assessments (PIA/DPIA/TIA) tied to intake or procurement systems.\nExperience building reporting/analytics pipelines (e.g., ADO Analytics, Power BI) that translate raw operational data into KPI dashboards for privacy program leadership.\nSolid understanding of core privacy concepts (data minimization, purpose limitation, data subject rights, retention) and global privacy regulations (UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA, or similar) as applied to technical system design.\nExperience working with structured and unstructured data across multiple systems and cloud environments.\nCore Competencies\nStrong systems-design thinking with the ability to balance automation against defensibility and risk.\nAbility to work independently and collaboratively across global engineering, legal, and privacy teams.\nStrong troubleshooting and debugging skills across integrated systems.\nAdaptability to evolving regulatory and technical requirements.\nClear communication skills to translate technical architecture into terms non-technical privacy and legal stakeholders can act on.\nPreferred Qualifications\nExperience with privacy management platforms (e.g., OneTrust, BigID, Collibra) and their APIs/connector frameworks.\nCIPT certification.\nExperience with cloud data infrastructure (AWS, Azure, or GCP), including native discovery/classification services (e.g., Macie, Purview).\nExperience building automated redaction/exception-flagging pipelines with tuned accuracy and governed human-review checkpoints.\nExperience supporting DSAR automation at scale, including SLA tracking/escalation design and volume-spike scaling strategies.\nExperience designing event-driven data mapping architectures integrated with CMDB/asset inventory or cloud discovery tooling.\nThis posting is for proactive recruitment purposes and may be used to fill current openings or future vacancies within our organization.\nWhat’s in it For You?\nHybrid Work Model: We’ve adopted a flexible hybrid working environment for our office-based roles while delivering a seamless experience that is digitally and physically connected.\nFlexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.\nCareer Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.\nIndustry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.\n Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.\n Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives. \n Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.\nOur use of AI within the recruitment process Thomson Reuters utilizes Artificial Intelligence (AI) to support parts of our global recruitment process. Unless you opt-out, our AI system will assess the information provided by you and compare it to the requirements listed for the role, and present the result to our recruitment personnel for further review. The AI system acts as a supporting tool, but there is always a human making the decision if you will be considered for the role\nThomson Reuters complies with local laws that require upfront disclosure of the expected pay range for a position. The base compensation range varies across locations.\n\nFor Ontario, Canada, the base compensation range for this role is $79,000 CAD - $129,000 CAD.\n\nBase pay is positioned within the range based on several factors including an individual’s knowledge, skills and experience with consideration given to internal equity. Base pay is one part of a comprehensive Total Reward program which also includes flexible and supportive benefits and other wellbeing programs.\nThis role may also be eligible for an Annual Bonus based on a combination of enterprise and individual performance.\nAbout Us\nThomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.\nWe are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.\nAs a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud...","description_format":"text","description_chars":12440,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity","Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["News Agencies","RegTech, AML & Compliance","Accounting & Tax Software","Legal Software"],"lifecycle":[{"event":"open","at":"2026-10-27T00:08:53Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 3","filings_12m":3,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":25,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/thomson-reuters-privacy-operations-engineer","json_url":"https://alion.io/job/thomson-reuters-privacy-operations-engineer.json","meta":{"generated_at":"2026-10-29T12:05:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18058,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1951},"rest":"https://alion.io/mcp/rest/get_company?id=1951"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthomson-reuters-privacy-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthomson-reuters-privacy-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthomson-reuters-privacy-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thomson-reuters-privacy-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthomson-reuters-privacy-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3302483}},{"tool":"search_jobs","arguments":{"company":"thomsonreuters.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3302483},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}