Senior Cybersecurity & Privacy Counsel (Hybrid)

USA018 Thomson Reuters Holdings Inc.; Frisco (TX); Hybride; USD 120 000 - 222 000; Plein temps

Avantages offerts par ce poste

Health/Dental/Vision Insurance

401(k) with company match

Paid time off & holidays

Mental health days

Tuition reimbursement

Résumé du poste

Thomson Reuters Holdings Inc. seeks a Senior Counsel to serve as the primary legal advisor at the intersection of cybersecurity and privacy law.

The role supports incident response, breach notification, regulatory engagement, and product privacy across US, EU, LATAM, EMEA, and APAC. You will work with Information Security, Risk Management and Commercial Legal, report to the Chief Privacy Officer, and guide cross-border programs, FedRAMP, NIST, GDPR, and regulatory filings while developing

Qualifications

• J.D. and active bar membership in at least one US jurisdiction, in good standing.
• 8+ years of privacy/cybersecurity law experience.
• Substantive experience advising on data breach response and regulator engagement.
• Strong working knowledge of US privacy and cybersecurity law, incl. state breach statutes and CCPA/CPRA.
• Expertise in GDPR security and breach requirements, NIS2, DORA, and Cyber Resilience Act.
• Working knowledge of FedRAMP and NIST 800-53/800-171 and related security control work.
• Experience conducting or overseeing PIAs and DPIAs.
• Ability to lead cross-functional stakeholders through high-stakes incidents.

Responsabilités

• Lead legal analysis during security incidents and data breaches, incl. real-time decision-making.
• Engage regulators on notifications and investigations.
• Develop and maintain global incident response and breach playbooks.
• Advise on US, EU, APAC regulatory requirements.
• Support FedRAMP and other federal authorization packages.
• Lead product privacy risk assessments and PIAs/DPIAs.
• Provide privacy-by-design guidance to product and engineering teams.

Connaissances

Privacy law

Cybersecurity law

Incident response

Regulatory engagement

CCPA/CPRA

GDPR/NIS2

FedRAMP/NIST

PIAs/DPIAs

Cross-functional

Formation

J.D. and US bar

Outils

OneTrust

Description du poste

Thomson Reuters Holdings Inc. seeks a Senior Counsel to serve as the primary legal advisor at the intersection of cybersecurity and privacy law.

The role supports incident response, breach notification, regulatory engagement, and product privacy across US, EU, LATAM, EMEA, and APAC. You will work with Information Security, Risk Management and Commercial Legal, report to the Chief Privacy Officer, and guide cross-border programs, FedRAMP, NIST, GDPR, and regulatory filings while developing