Analyst, Privacy
Own Coinbase’s privacy incident management program, leading investigations, response coordination, remediation, retrospectives, and process improvements. The role requires 3+ years in privacy, security, incident response, or technology risk, plus SQL, Python, automation, and privacy regulatory knowledge.
About the job
Responsibilities
- Own the end-to-end Privacy Incident Management program, including notification workflows, escalation paths, process documentation, responder enablement, and automation opportunities.
- Lead privacy incident response as the directly responsible individual and Incident Commander, coordinating with Privacy, Privacy Legal, CSIRT, Product, Engineering, Communications, and Customer Support to drive analysis, remediation, and follow-through.
- Maintain on-call readiness for privacy incident triage, severity classification, and urgent escalations.
- Lead privacy incident retrospectives, track remediation items and control gaps, and deliver metrics and reporting on trends, remediation status, and process health.
- Build cross-functional and cross-geography stakeholder relationships to improve readiness, response quality, and accountability.
- Support broader Privacy initiatives, including tooling development and automation projects.
Requirements
- 3+ years of experience in privacy, security, incident response, technology risk, or a related operational risk function.
- Experience leading or supporting incident, issue, or risk workflows requiring structured analysis, documentation, and cross-functional coordination.
- Strong incident management and communication skills, including communicating privacy risk and incident findings to technical and non-technical audiences.
- Experience producing written incident analyses, retrospective documentation, and executive-level summaries.
- Experience leading technical investigations in cloud-native architectures.
- Hands-on proficiency with SQL, Python, and data analysis tools.
- Experience building automation to reduce manual operational work and improve incident response efficiency.
- Working knowledge of privacy regulations and frameworks, including GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, and data subject rights.
- Ability to use and build generative AI responsibly with human oversight.
Nice-to-haves
- Experience with Postgres, MongoDB, Airflow, Looker, or Snowflake.
Compensation
- Annual base salary: $135,320–$159,200 USD.
- Total compensation may also include equity, bonus eligibility, and benefits including medical, dental, vision, and 401(k).
Skills
SQL, Python, Postgres, MongoDB, Airflow, Looker, Snowflake, Incident Management, Cloud-Native Architecture, Privacy Regulations, GDPR, CCPA, Generative AI
Similar jobs
Security Engineering jobs
Writer
New York, NYBuild and scale application security for an enterprise AI platform, including threat modeling, secure architecture, automated controls, code review, and penetration testing. Requires at least four years of application security experience, programming expertise, and knowledge of DevSecOps and security-testing practices.
Figma
San Francisco, CASecurity Scientist analyzing attacker and user behavior, building data-driven detections, and leading security investigations and design reviews. Requires strong security and anti-abuse knowledge, SQL fluency, scripting proficiency, and experience with distributed data systems and statistical methods.
Mercor
San Francisco, CAOwns application security by embedding review workflows in SDLC, building SAST/DAST pipelines in CI/CD, managing vulnerability remediation, and operating bug bounty programs. Requires 5+ years experience finding/fixing vulnerabilities, strong skills in Python/TypeScript/Go, and SAST/DAST tooling.
OpenAI
San Francisco, CAInvestigates and assesses physical security threats involving personnel, executives, events, travel, and operations. The role requires at least five years of relevant intelligence or threat-assessment experience, strong analytical communication, and familiarity with OSINT, behavioral threat methodologies, and technology-enabled investigations.
Applied Intuition
Sunnyvale, CA
Develops machine-level safety cases, hazard analyses, and safety requirements for autonomous mining and industrial equipment. The role requires hands-on system safety experience, knowledge of ISO 26262, and collaboration across hardware, software, controls, and validation teams.