Incident Response Manager - Privacy

Details

Anthropic is seeking an experienced Technical Program Manager to own and evolve privacy incident management for frontier AI systems handling sensitive information at scale. This senior-level role will lead the engineering-side privacy incident response program, covering detection, triage, containment, remediation, post-incident review, trend analysis, metrics, and systemic improvements. The role involves working with incidents involving personal data subject to GDPR, CCPA, HIPAA, and customer contractual commitments.

Responsibilities

• Own the end-to-end privacy incident management program, including detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for privacy incidents, coordinating executives, engineering, security, legal, and other stakeholders.
• Establish and operate privacy incident commander rotations.
• Define processes for capturing, assigning, tracking, and completing incident action items across teams.
• Analyze incident trends and patterns to identify systemic risks, recurring root causes, and organizational vulnerabilities.
• Partner with engineering, infrastructure, security, and product teams to implement broad preventive fixes and improvements.
• Lead post-mortems, retrospectives, and incident review forums, ensuring learnings are documented and acted upon.
• Partner with Privacy Legal on breach and notifiability assessments, regulatory timelines, and customer and regulator communications.
• Maintain privacy incident response documentation, playbooks, runbooks, and training materials.
• Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time to detection for privacy events.
• Define and track incident management KPIs and report to leadership.
• Support privacy awareness initiatives, including tabletop exercises, training, and talks.
• Participate in on-call responsibilities and lead high-severity privacy incident response, including outside normal working hours.

Requirements

• Experience leading or building incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
• Demonstrated ability to turn incident data into organizational improvements and drive cross-functional systemic fixes.
• Experience building and scaling operational processes from the ground up.
• Ability to drive accountability and follow-through across multiple teams without direct authority.
• Strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
• Excellent organization and communication skills, including communication under pressure with technical, non-technical, and executive stakeholders.
• Ability to work effectively in fast-paced environments with shifting priorities and incomplete information.
• Preferred: 7+ years of experience in technical program management, incident management, or security/privacy operations, with significant incident response experience.
• Preferred: Familiarity with GDPR, CCPA, HIPAA, and similar privacy regulations and breach-notification obligations, as well as working with legal counsel under privilege or a legal background.
• Minimum education: Bachelor’s degree or an equivalent combination of education, training, and experience.

Benefits

Anthropic offers competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office space for collaboration. The role follows a location-based hybrid policy, with staff currently expected to work from an office at least 25% of the time. Anthropic states that it sponsors visas and will make reasonable efforts to support visa processing with an immigration lawyer.