Privacy Operations Analyst

Thomson Reuters; Manila; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Thomson Reuters is seeking a Privacy Operations Analyst in Manila to drive privacy program management. You will organize privacy work in Azure DevOps or Jira, develop KPI dashboards, and track cross-functional items across Legal, Security, and Product teams.

You will handle DSARs, PIAs/DPIAs, data mapping, and risk assessments while supporting governance and stakeholder reporting. You will collaborate with Legal and IT to embed privacy-by-design practices, assist with privacy training, and help

Qualifications

• 4+ years in privacy, compliance, legal operations, or similar role supporting global privacy programs
• Knowledge of UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA and related regimes
• Hands-on experience configuring privacy platforms (OneTrust, TrustArc) and running DSAR, PIA/DPIA, and data mapping workflows
• Experience using work-management tools (Azure DevOps, Jira) to structure privacy operations and build leadership dashboards
• Exposure to automation of privacy workflows (Power Automate, API integrations) to reduce manual effort

Responsibilities

• Structure and maintain privacy operations work in Azure DevOps or Jira with custom work items
• Build KPI dashboards and reporting for privacy leadership using Power BI or similar tools
• Track cross-functional privacy work items and surface bottlenecks
• Coordinate responses to DSARs and data subject rights requests within regulatory timelines
• Track and report privacy program metrics for leadership and stakeholders
• Conduct privacy risk assessments (PIAs/DPIAs/TIAs) for new products and vendors
• Maintain ROPA data mapping linked to risk findings
• Support privacy compliance across jurisdictions and incident response processes
• Collaborate with Legal, Security, IT, Product on privacy-by-design initiatives
• Assist with privacy training content delivery and vendor reviews
• Contribute to privacy policy, procedures, and governance documentation

Skills

UK GDPR

EU GDPR

CCPA/CPRA

PIPEDA

OneTrust

TrustArc

Azure DevOps

Jira

Automation of privacy workflows

Tools

OneTrust

TrustArc

Azure DevOps

Jira

Job description

Privacy Operations Analyst

Job Description

Key Responsibilities

Privacy Program Management & Reporting

• Structure and maintain privacy operations work in Azure DevOps (ADO), Jira, or similar work-management tools, including custom work item types and fields mapped to privacy concepts (jurisdiction, data type, risk tier).
• Build and maintain KPI dashboards and reporting (e.g., DSAR SLA compliance, assessment backlog age, incident response times) for privacy program leadership, using ADO Analytics, Power BI, or similar tools.
• Track cross-functional privacy work items that depend on Legal, Security, and Product teams, and proactively surface bottlenecks and at-risk items.
• Coordinate responses to data subject access requests (DSARs) and other data subject rights requests, ensuring timely resolution within statutory timelines across jurisdictions.
• Track and report on privacy program metrics and KPIs for leadership and relevant stakeholders.

Privacy Risk Assessments

• Conduct and document privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and transfer impact assessments (TIAs) for new products, features, and vendor engagements.
• Support automated assessment workflows that trigger and assign PIAs/DPIAs based on risk-based conditional logic (data type, processing purpose, jurisdiction, vendor risk tier), escalating high-risk triggers for senior review.
• Support efforts to reduce manual effort in assessment scoring and risk rating, applying sound judgment on what can be automated versus what must remain human-reviewed.

Data Mapping & ROPA Maintenance

• Maintain and update the company's records of processing activities (ROPA), tying outputs directly to data mapping and risk assessment findings.
• Support data discovery and data flow mapping efforts across the organization's systems, environments, and third-party integrations, leveraging data discovery tooling where available.
• Support an ongoing ownership and maintenance model for the data map/ROPA, including monitoring for drift as systems or vendors change and reconciling against discovery tool outputs.

Privacy Compliance & Risk Management

• Monitor and track changes in privacy regulations across jurisdictions, and support compliance with key regulations including UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA, and other applicable regimes.
• Support privacy incident response and breach notification processes, including incident documentation and breach register maintenance.
• Support privacy audits and assessments of internal processes and third-party vendors.

Privacy-by-Design & Cross-Functional Collaboration

• Support the intake and triage of privacy-related inquiries from internal stakeholders and customers.
• Partner with Legal, Information Security, IT, Product, and Business teams to support the integration of privacy-by-design principles into the product development cycle.
• Assist with privacy training content delivery and tracking across the business.
• Support vendor and partner reviews to ensure contractual privacy obligations are met, and help identify current sub-processors for contractual documentation updates.

Documentation & Governance

• Contribute to internal privacy policy, procedure, and operational playbook documentation.
• Maintain privacy metrics, dashboards, and reports for leadership and relevant stakeholders.
• Provide guidance and quality review to junior privacy operations team members on documentation and process adherence.

Required Qualifications

• At least 4 years of experience in a privacy, compliance, legal operations, or similar role, supporting a global or multi-jurisdictional privacy program.
• Working knowledge of UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA, and other applicable global data subject rights frameworks.
• Hands-on experience with privacy management platforms (e.g., OneTrust, TrustArc) configuring or running DSAR, PIA/DPIA, and data mapping workflows.
• Experience using work-management tools (e.g., Azure DevOps, Jira) to structure and track privacy operations work, including building reporting dashboards and KPIs for leadership.
• Exposure to or experience with automation of privacy workflows (e.g., Power Automate, API integrations between privacy platforms and ticketing systems) to reduce manual eff