Senior Privacy Engineer – Automation & Data Mapping
Thomson Reuters14 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Design, build, and maintain automation for data subject rights fulfillment, data discovery, data mapping, privacy assessment triggering, routing, SLA tracking, escalation, and surge capacity.
- Build and maintain API and Power Automate integrations between privacy management platforms and internal ticketing, identity, data-store, and work-management systems, including field mapping, bi-directional status synchronization, error handling, and logging.
- Implement risk-based conditional logic and trigger workflows for PIAs, DPIAs, and TIAs, with escalation paths, validation, reminders, governance, and audit trails.
- Build automated redaction and exception-flagging pipelines with mandatory human review and auditable redaction decisions.
- Develop event-driven data flow inventory and data-mapping pipelines that feed ROPA records from discovery, classification, system, vendor, and procurement data.
- Integrate data discovery and classification tooling and implement drift detection between ROPA records and discovery or mapping outputs.
- Support privacy impact assessments through data-flow diagrams, system reviews, and architecture guidance.
- Partner with engineering and product teams to implement privacy-by-design, privacy-by-default, retention, and deletion controls.
- Build KPI dashboards and reporting pipelines for privacy-program metrics and monitor the health, quality, and consistency of privacy tooling and automation.
Requirements
- 5–7 years of experience in data engineering, software engineering, or technical privacy/compliance engineering, ideally in a global or multinational organization.
- Strong proficiency in at least one programming or scripting language such as Python or SQL, with experience building API integrations and automated workflows.
- Hands-on experience integrating privacy management platforms such as OneTrust, BigID, or Collibra with ticketing, identity, data-store, and work-management systems.
- Experience designing automated data discovery and data-mapping pipelines across structured and unstructured data sources, including AWS Macie, Azure Purview, or database crawlers.
- Experience implementing risk-based trigger workflows for privacy assessments and building reporting or analytics pipelines for KPI dashboards.
- Understanding of data minimization, purpose limitation, data subject rights, retention, and global privacy regulations including UK GDPR, EU GDPR, CCPA/CPRA, and PIPEDA or similar.
- Experience working with structured and unstructured data across multiple systems and cloud environments.
- Preferred qualifications include CIPT certification, experience with OneTrust, BigID, or Collibra APIs and connector frameworks, cloud data infrastructure across AWS, Azure, or GCP, automated redaction pipelines, DSAR automation at scale, and event-driven architectures integrated with CMDB or asset inventory tooling.
- Strong systems-design, troubleshooting, debugging, communication, independent-working, and cross-functional collaboration skills.
Benefits
- Flexible hybrid work model for office-based roles.
- Work-from-anywhere flexibility for up to 8 weeks per year and broader work-life balance policies.
- Career development, continuous learning, Grow My Way programming, and skills-first growth support.
- Comprehensive benefits including flexible vacation, two company-wide Mental Health Days, Headspace access, retirement savings, tuition reimbursement, incentive programs, and wellbeing resources.
- Two paid volunteer days annually and opportunities for pro-bono consulting and ESG initiatives.
Tech Stack
Categories
Data Engineering
About Thomson Reuters
Thomson Reuters builds research platforms, workflow software, and data services for legal, tax and accounting, compliance, and government professionals, and operates the Reuters global news service. Flagship products include Westlaw for legal research and ONESOURCE and Checkpoint for tax and accounting, sold primarily via subscriptions and enterprise licenses. A public company headquartered in Toronto, it was formed in 2008 by combining Thomson Corporation and Reuters Group and is listed on the TSX and Nasdaq as TRI.