Privacy Operations Engineer
Thomson Reuters1 day ago
Toronto, CanadaSenior
Responsibilities
- Design, build, and maintain automation for data subject rights fulfillment, data discovery, data mapping, privacy assessments, DSAR routing, SLA tracking, escalation, and surge capacity.
- Build API and Power Automate integrations between privacy management platforms and internal ticketing, identity, data-store, intake, and procurement systems, including field mapping, status synchronization, error handling, and audit logging.
- Develop event-driven data flow inventory, data mapping, ROPA, drift-detection, and classification pipelines across structured and unstructured data sources.
- Implement risk-based assessment triggers, conditional logic, validation, escalation paths, governance controls, and audit trails for PIAs, DPIAs, and TIAs.
- Build automated redaction and exception-flagging pipelines with mandatory human review and auditable redaction decisions.
- Partner with engineering and product teams on privacy-by-design, privacy-by-default, data retention, deletion, and technical architecture reviews.
- Build KPI dashboards and reporting pipelines for DSAR compliance, assessment backlogs, incident response times, and privacy program health.
- Monitor privacy tooling and automated process health, troubleshoot integration and data-quality issues, and govern reporting definitions and workflow changes.
Requirements
- 5–7+ years of experience in data engineering, software engineering, or technical privacy/compliance engineering, ideally in a global or multinational organization.
- Strong proficiency in at least one programming or scripting language such as Python or SQL, with experience building API integrations and automated workflows.
- Hands-on experience integrating privacy management platforms such as OneTrust, BigID, or Collibra with ticketing systems, identity systems, and data stores.
- Experience building automated data discovery and data-mapping pipelines across structured and unstructured data sources, including cloud discovery and classification tools.
- Experience implementing risk-based conditional logic and trigger workflows for privacy assessments connected to intake or procurement systems.
- Experience building reporting and analytics pipelines and KPI dashboards for privacy program leadership.
- Understanding of data minimization, purpose limitation, data subject rights, retention, and global privacy regulations including UK GDPR/EU GDPR, CCPA/CPRA, or PIPEDA.
- Experience working with structured and unstructured data across multiple systems and cloud environments.
- Strong systems-design, troubleshooting, debugging, communication, and cross-functional collaboration skills.
- Preferred qualifications include experience with privacy platform APIs or connector frameworks, CIPT certification, AWS/Azure/GCP data infrastructure, automated redaction pipelines, DSAR automation at scale, and event-driven architectures integrated with CMDB or asset inventory tools.
Benefits
- Flexible hybrid work model for office-based roles, with work-from-anywhere flexibility for up to 8 weeks per year.
- Flexible work-life balance policies and professional development through Grow My Way programming and skills-first learning.
- Comprehensive benefits including flexible vacation, two company-wide Mental Health Days, Headspace access, retirement savings, tuition reimbursement, incentive programs, and wellbeing resources.
- Two paid volunteer days annually and opportunities for pro-bono consulting and ESG initiatives.
Tech Stack
Categories
Data Engineering
About Thomson Reuters
Thomson Reuters builds research platforms, workflow software, and data services for legal, tax and accounting, compliance, and government professionals, and operates the Reuters global news service. Flagship products include Westlaw for legal research and ONESOURCE and Checkpoint for tax and accounting, sold primarily via subscriptions and enterprise licenses. A public company headquartered in Toronto, it was formed in 2008 by combining Thomson Corporation and Reuters Group and is listed on the TSX and Nasdaq as TRI.