Analyst, Privacy

Details

Coinbase's Privacy team is hiring a Privacy Analyst to own the Privacy Incident Management function and report to the Head of Privacy. The role partners across Privacy, Privacy Legal, Security, Product, Engineering, and Communications to triage incidents involving personal data, drive privacy analysis, coordinate remediation, and improve privacy incident response processes. Coinbase is a remote-first, but not remote-only, company, with quarterly in-person working sessions called “surges.”

Responsibilities

• Own the end-to-end Privacy Incident Management program, including notification workflows, escalation paths, process documentation, responder enablement, and automation opportunities.
• Lead privacy incident response as the directly responsible individual and Incident Commander, coordinating across Privacy, Privacy Legal, CSIRT, Product, Engineering, and Communications to drive analysis, remediation, and follow-through.
• Maintain on-call readiness to support privacy incident triage, severity classification, and urgent escalations.
• Drive privacy incident retrospectives, track remediation items and control gaps, and deliver incident metrics and reporting covering trends, remediation status, and process health.
• Build and maintain cross-functional and cross-geography stakeholder relationships to improve readiness, response quality, and business accountability.
• Support broader Privacy initiatives during lower-volume periods, including cross-functional efforts, tooling development, and automation projects.

Requirements

• 3+ years of experience in privacy, security, incident response, technology risk, or a related operational risk function.
• Direct experience leading or supporting incident, issue, or risk workflows requiring structured analysis, documentation, and cross-functional coordination.
• Strong incident management skills, including communicating privacy risk and incident findings to technical and non-technical audiences.
• Experience producing written incident analyses, retrospective documentation, and executive-level summaries.
• Proven track record of leading technical investigations within cloud-native architectures.
• Hands-on proficiency in SQL, Python, and data analysis tools such as Postgres, MongoDB, Airflow, Looker, and Snowflake.
• Experience building automation to reduce manual operational tasks and improve incident response efficiency.
• Working knowledge of privacy regulations and frameworks, including GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, and data subject rights.
• Knowledge of privacy controls and privacy issue management.
• Ability to use and build generative AI responsibly while maintaining human oversight and improving workflow efficiency, cost, and quality.
• Maintain on-call readiness for privacy incident triage and urgent escalations.

Compensation

The annual base salary range is $135,320–$159,200 USD, excluding equity and bonus. Total compensation may also include equity, bonus eligibility, and medical, dental, vision, and 401(k) benefits.

Candidates may submit a maximum of three applications within a six-month period. Coinbase is an Equal Opportunity Employer and provides reasonable accommodations for applicants with disabilities.