Analyst, Privacy

As a Privacy Analyst at Coinbase, you own the Privacy Incident Management function, reporting to the Head of Privacy. You partner across Privacy, Privacy Legal, Security, Product, Engineering, and Communications to triage incidents involving personal data, drive privacy analysis, coordinate remediation, and continuously improve how Coinbase responds to privacy incidents. This role suits someone who thrives in ambiguity, drives cross-functional coordination during time-sensitive events, and builds durable process improvements.

What you'll do

• Own the end-to-end Privacy Incident Management program, including notification workflows, escalation paths, process documentation, responder enablement, and automation opportunities.
• Lead privacy incident response as the DRI and Incident Commander, coordinating across Privacy, Privacy Legal, CSIRT, Product, Engineering, and Communications to drive analysis, remediation, and follow-through.
• Maintain on-call readiness to support privacy incident triage, severity classification, and urgent escalations, ensuring incidents are correctly assessed and routed.
• Drive privacy incident retrospectives, track resulting remediation items and control gaps, and deliver incident metrics and reporting covering trends, remediation status, and process health.
• Build and maintain strong cross-functional and cross-geography stakeholder relationships to improve readiness, response quality, and business accountability.
• Support broader Privacy initiatives during lower-volume periods, including cross-functional efforts, tooling development, and automation projects.

What you bring

• 3+ years of experience in privacy, security, incident response, technology risk, or a related operational risk function, including direct experience leading or supporting incident, issue, or risk workflows requiring structured analysis, documentation, and cross-functional coordination.
• Strong incident management skills with the ability to communicate privacy risk and incident findings to both technical and non-technical audiences, including producing written incident analyses, retrospective documentation, and executive-level summaries.
• A proven track record of leading technical investigations within cloud-native architectures, with hands-on proficiency in SQL, Python, and data analysis tools such as Postgres, MongoDB, Airflow, Looker, and Snowflake.
• Demonstrated experience building automation to reduce manual operational tasks and improve incident response efficiency.
• Working knowledge of privacy regulations and frameworks including GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, and data subject rights, as well as privacy controls and privacy issue management.
• The ability to utilise and build generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

What we offer

• Annual base salary of $135,320-$159,200 USD, depending on location
• Equity and bonus eligibility
• Benefits including medical, dental, vision, and 401(k)
• Remote-first work environment with quarterly in-person working sessions called surges

About Coinbase

Coinbase is on a mission to increase economic freedom. The company operates as a remote-first, but not remote-only organisation, bringing teams together quarterly for intense in-person working sessions.