Assistant General Counsel

Join Thomson Reuters as an Assistant General Counsel, where you will lead and develop a geographically distributed team of privacy lawyers, shape the long-term vision of the global privacy legal function, and provide legal advice on global privacy, data protection, and cybersecurity matters. This senior leadership role is integral to advancing Thomson Reuters' global privacy strategy and ensuring robust data protection and cybersecurity legal compliance across worldwide operations.

• Lead and manage privacy legal compliance across multiple jurisdictions, with a primary focus on the EU GDPR, UK GDPR, Asia-Pacific, and Middle East & Africa regulatory frameworks.
• Serve as a trusted legal advisor to the Chief Privacy Officer and senior business leaders on global privacy, data protection, and cybersecurity matters.
• Develop and maintain privacy frameworks governing the responsible use of AI and machine learning, including data provenance, model training data governance, automated decision-making, and algorithmic transparency obligations under applicable law.

• Demonstrable expertise advising on the EU GDPR, UK GDPR, and data protection regimes across Asia-Pacific and Middle East & Africa
• Proven people leadership experience, with a track record of managing, developing, and inspiring teams of lawyers, ideally across multiple geographies and time zones
• Strong interpersonal and communication skills, with the ability to influence senior stakeholders and build trusted relationships across cultures, functions, and geographies
• CIPP/E, CIPP/M, or equivalent privacy certification
• Ability to navigate complex, multi-jurisdictional legal landscapes and deliver clear, practical, commercially sound advice under uncertainty
• Deep understanding of the interplay between data protection law, cybersecurity regulation, AI governance, and technology-driven business models
• Experience working in-house at, or providing sustained counsel to, a multinational technology, information services, or data-driven company
• Experience advising on EU cybersecurity regulatory frameworks
• Qualified lawyer with 8–10 years of post-qualification experience in privacy, data protection, cybersecurity, technology, or related areas of law
• Familiarity with the development and maintenance of privacy information management systems, including frameworks based on ISO/IEC 27701, SOC 2, and relevant ISO audit and compliance programs
• Experience advising on AI governance, automated decision-making, or the data protection implications of AI and machine learning systems
• Experience supporting products or services held to a professional, fiduciary, or similarly heightened standard of care, such as legal, financial, medical, tax, accounting, or compliance-sector products
• Experience engaging directly with data protection authorities, cybersecurity regulators, or other relevant supervisory bodies