SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 135,320 - 159,200 / annual
Coinbase's Privacy team is seeking a Privacy Analyst to own the Privacy Incident Management function, reporting to the Head of Privacy. This role sits at the intersection of privacy operations, security, and cross-functional coordination, requiring someone who thrives in ambiguity and can drive rapid response during time-sensitive events.
Key responsibilities include owning the end-to-end Privacy Incident Management program—from notification workflows and escalation paths to process documentation and responder enablement. You'll serve as the Designated Responsible Individual (DRI) and Incident Commander for privacy incidents, coordinating across Privacy, Privacy Legal, Security (CSIRT), Product, Engineering, and Communications to drive analysis, remediation, and follow-through. The role requires on-call readiness to support privacy incident triage, severity classification, and urgent escalations.
You'll drive privacy incident retrospectives, track remediation items and control gaps, and deliver incident metrics and reporting covering trends, remediation status, and process health. Building and maintaining strong cross-functional and cross-geography stakeholder relationships is essential to improve readiness, response quality, and business accountability. During lower-volume periods, you'll support broader Privacy initiatives, including cross-functional efforts, tooling development, and automation projects.
Required experience includes 3+ years in privacy, security, incident response, technology risk, or related operational risk functions, with direct experience leading or supporting incident, issue, or risk workflows. You must have strong incident management skills and the ability to communicate privacy risk and findings to both technical and non-technical audiences, including producing written analyses, retrospective documentation, and executive summaries.
Technical proficiency is critical: hands-on experience with SQL, Python, and data analysis tools (Postgres, MongoDB, Airflow, Looker, Snowflake) is required, along with proven ability to lead technical investigations within cloud-native architectures. You should have a track record of building automation to reduce manual operational tasks and improve incident response efficiency.
Working knowledge of privacy regulations and frameworks (GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, data subject rights) and privacy controls is essential. The role also values responsible use and development of generative AI, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Coinbase is a remote-first but not remote-only company, with quarterly in-person working sessions called "surges." The company is uncompromising on its mission to increase economic freedom and maintains a high-intensity, high-bar environment.
