Senior Privacy Engineer – Automation & Data Mapping

Overview

Senior hands-on engineering role building and maintaining the tooling, automation and data infrastructure behind Thomson Reuters' global privacy program across UK/EU, US, APAC and other regions, bridging privacy compliance and technical implementation.

What you'll do

• Design, build and maintain automation for privacy operations workflows, including data subject rights fulfillment, data discovery, data mapping and privacy assessment triggering.
• Build and maintain API and Power Automate integrations between privacy management platforms (e.g., OneTrust) and internal systems (ticketing/ADO/Jira, identity, data stores), including field mapping, assignment logic, bi-directional status sync, and error handling/logging.
• Implement risk-based conditional logic and trigger workflows for privacy assessments (PIAs/DPIAs/TIAs) tied to intake or procurement systems, including escalation paths and governance/audit trails over trigger rules.
• Design and maintain automated redaction and exception-flagging pipelines (e.g., keyword/pattern matching, ML classifiers) for DSAR fulfillment, with a mandatory human-review checkpoint before release and an audit log of redaction decisions.
• Build and maintain an automated, event-driven data flow inventory and data mapping pipeline tied to system/vendor intake and procurement processes.
• Build and maintain integrations with data discovery and classification tooling (e.g., OneTrust Data Discovery, BigID, Collibra, AWS Macie, Azure Purview, database crawlers) to feed classifications and data flows into ROPA records.
• Implement drift-detection mechanisms reconciling ROPA records against discovery/mapping tool outputs, and support metrics such as percentage of ROPA records reviewed within a defined window.
• Support technical aspects of privacy impact assessments, including data flow diagrams and system/architecture review.
• Partner with engineering and product teams to implement privacy-by-design and privacy-by-default controls within products and internal systems.
• Assist in the technical implementation of data retention and deletion requirements across structured and unstructured data sources.
• Advise engineering teams on technical architecture considerations for new products and features from a privacy and data protection perspective.
• Build and maintain KPI dashboards and reporting pipelines (e.g., ADO Analytics, Power BI) translating work-item and automation data into executive-ready privacy program metrics (DSAR SLA compliance, assessment backlog, incident response times).
• Monitor and report on the health of privacy tooling and automated processes, troubleshooting integration and data-quality issues.
• Maintain governance over report definitions and automation/trigger rule changes so metrics and workflows remain consistent and trustworthy.
• Design and maintain automated routing of DSAR tasks with data-owner mapping across multiple systems, SLA tracking tied to statutory deadlines, and tiered escalation.
• Build scalable automation and surge-capacity mechanisms (triage automation, templated responses) to support DSAR volume spikes, incorporating lessons learned into process improvements.
• Support automation of assessment intake quality, including conditional required fields, real-time validation, and automated reminders to reduce incomplete submissions.

What you'll need

• 5-7 years of experience in a data engineering, software engineering, or technical privacy/compliance engineering role, ideally supporting privacy or compliance operations at a global or multinational organization.
• Strong proficiency in at least one programming/scripting language (e.g., Python, SQL) and demonstrated experience building and maintaining API integrations and automated workflows (e.g., Power Automate, custom scripts, middleware).
• Hands-on experience building integrations between privacy management platforms (e.g., OneTrust, BigID, Collibra) and internal systems (ticketing/ADO/Jira, identity, data stores), including field mapping, assignment logic, and bi-directional status sync with error handling.
• Experience designing and maintaining automated data discovery and data mapping pipelines across structured and unstructured data sources (e.g., AWS Macie, Azure Purview, database crawlers) that feed ROPA records.
• Experience implementing risk-based conditional logic and trigger workflows for privacy assessments (PIA/DPIA/TIA) tied to intake or procurement systems.
• Experience building reporting/analytics pipelines (e.g., ADO Analytics, Power BI) that translate raw operational data into KPI dashboards for privacy program leadership.
• Solid understanding of core privacy concepts (data minimization, purpose limitation, data subject rights, retention) and global privacy regulations (UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA, or similar) as applied to technical system design.
• Experience working with structured and unstructured data across multiple systems and cloud environments.

Nice to have

• Experience with privacy management platforms (e.g., OneTrust, BigID, Collibra) and their APIs/connector frameworks.
• CIPT certification.
• Experience with cloud data infrastructure (AWS, Azure, or GCP), including native discovery/classification services (e.g., Macie, Purview).
• Experience building automated redaction/exception-flagging pipelines with tuned accuracy and governed human-review checkpoints.
• Experience supporting DSAR automation at scale, including SLA tracking/escalation design and volume-spike scaling strategies.
• Experience designing event-driven data mapping architectures integrated with CMDB/asset inventory or cloud discovery tooling.

Details

• Location: Bangalore / Bengaluru, Karnataka, India.
• Hybrid work model for office-based roles.