Senior Global Cyber Privacy Counsel

Thomson Reuters; Frisco (TX); Hybrid; USD 120,000 - 222,000; Full time

Benefits offered by this job

Hybrid Work Model

Mental Health Days

Tuition Reimbursement

Employee Stock Purchase Plan

Job summary

Thomson Reuters is seeking a Senior Counsel to lead the legal strategy at the intersection of cybersecurity and privacy law. The role advises on incident response, breach notification, regulatory engagement, and compliance for US, EU, LATAM, EMEA, and APAC regions, partnering with Information Security, Risk Management, Privacy Operations and Commercial Legal teams.

Responsibilities include developing playbooks, advising on CCPA/CPRA, GDPR, NIS2, DORA, and federal frameworks, and guiding

Qualifications

• J.D. and active bar membership in good standing.
• 8+ years in privacy and/or cybersecurity law (in-house or law firm).
• Experience advising on data breach response and regulatory engagement with regulators.
• Strong knowledge of US privacy/cybersecurity laws including CCPA/CPRA and state breach laws.
• Expertise in EU GDPR, NIS2, DORA, and Cyber Resilience Act.
• Familiarity with FedRAMP, NIST 800-53/800-171, and security framework concepts.
• Experience with PIAs/DPIAs and privacy risk assessments.

Responsibilities

• Lead legal analysis during security incidents and data breaches, including real-time decision-making in incident response.
• Engage with regulators across US states and other jurisdictions on notifications and investigations.
• Develop and maintain global incident response and breach notification playbooks.
• Advise on federal and international regulatory requirements affecting products and programs.
• Support security assessments and authorization packages (FedRAMP, etc.).
• Provide product/privacy risk guidance to product and engineering teams.
• Negotiate cybersecurity provisions in vendor and customer contracts.

Skills

Regulatory engagement

Incident response

Litigation and risk analysis

Cross-functional leadership

Communication under pressure

Education

J.D. and active bar admission in at least one US jurisdiction

Job description

Thomson Reuters is seeking a Senior Counsel to lead the legal strategy at the intersection of cybersecurity and privacy law. The role advises on incident response, breach notification, regulatory engagement, and compliance for US, EU, LATAM, EMEA, and APAC regions, partnering with Information Security, Risk Management, Privacy Operations and Commercial Legal teams.

Responsibilities include developing playbooks, advising on CCPA/CPRA, GDPR, NIS2, DORA, and federal frameworks, and guiding