Role overview

Coinbase is seeking a Privacy Analyst to lead its Privacy Incident Management function, reporting to the Head of Privacy. In this role, you will own the end-to-end privacy incident management program and serve as the primary incident commander during privacy-related events, working across Privacy, Legal, Security, Product, Engineering, and Communications teams to respond to incidents involving personal data.

Key responsibilities

Own and manage the complete Privacy Incident Management program, including notification workflows, escalation procedures, process documentation, and automation opportunities.
Lead privacy incident response as the designated responder and incident commander, coordinating analysis, remediation efforts, and follow-through across multiple departments.
Maintain on-call readiness to triage privacy incidents, classify severity levels, and escalate urgent matters to ensure proper assessment and routing.
Conduct privacy incident retrospectives, track remediation items and control gaps, and deliver metrics and reporting on incident trends, remediation status, and process effectiveness.
Develop and strengthen cross-functional and cross-geography relationships to enhance incident readiness and response quality.
Contribute to broader Privacy initiatives during lower-activity periods, including tooling development and automation projects.

Requirements

At least three years of experience in privacy, security, incident response, technology risk, or related operational risk functions, with direct involvement in incident, issue, or risk workflows requiring structured analysis and cross-functional coordination.
Strong incident management capabilities with ability to communicate privacy risks and findings to both technical and non-technical stakeholders, including written analyses, retrospective documentation, and executive summaries.
Demonstrated experience leading technical investigations in cloud-native environments, with hands-on proficiency in SQL, Python, and data analysis tools such as Postgres, MongoDB, Airflow, Looker, or Snowflake.
Proven ability to design and build automation solutions that reduce manual operational work and improve incident response efficiency.
Working knowledge of privacy regulations and frameworks including GDPR, CCPA, PIPEDA, ePrivacy, data protection impact assessments, records of processing activities, and data subject rights.
Experience utilizing and building generative AI responsibly while maintaining human oversight to deliver business-ready outcomes and improve workflow efficiency.

What makes this role worth considering

Coinbase operates as a remote-first company with quarterly in-person working sessions designed for intensive collaboration. You will work within a mission-driven organization focused on increasing economic freedom, operating in an intense, high-bar environment that pushes team members beyond their perceived limits.