Privacy Analyst

Remote $135k–$159k 4 months ago full-time quality 9/10

Role in brief

Coinbase is seeking a Privacy Analyst to manage their Privacy Incident Management program. This role involves leading incident responses and collaborating with various teams. Ideal candidates have experience in privacy and security, along with strong incident management skills.

Apply now →

✓ Direct apply: you message the hiring person by email. No ATS.

privacysecurityincident responsetechnology riskSQLPythondata analysisPostgresMongoDBAirflowLookerSnowflake

About the role

In this role, you will be responsible for overseeing the Privacy Incident Management program at Coinbase. This includes managing notification workflows, escalation paths, and process documentation, while also leading incident response efforts across multiple teams. You will drive analysis and remediation of privacy incidents, ensuring effective communication and collaboration.

You will work in a remote-first environment, participating in quarterly in-person sessions. Success in this position requires building strong relationships across teams and improving incident response quality. You will also contribute to broader privacy initiatives, especially during periods of lower incident volume.

The base salary for this role ranges from $135,320 to $159,200, excluding additional compensation such as equity and bonuses.

Skills that matter here

  • privacy: This role requires a strong understanding of privacy regulations and frameworks.
  • security: You will manage security incidents and communicate findings effectively.
  • incident response: Leading privacy incident responses is a key responsibility.
  • technology risk: Experience in operational risk functions is essential.
  • SQL: You will use SQL for data analysis and incident investigations.
  • Python: Hands-on proficiency in Python is required for automation and analysis.

Who this role suits

  • You have a solid background in privacy and security, with experience leading incident management efforts.
  • You are comfortable communicating complex information to both technical and non-technical stakeholders.
  • You thrive in a collaborative environment and can build strong relationships across diverse teams.
  • You are proactive in identifying opportunities for automation to enhance incident response efficiency.

From the employer

  • Own the end-to-end Privacy Incident Management program, including notification workflows, escalation paths, process documentation, responder enablement, and automation opportunities.
  • Lead privacy incident response as the DRI and Incident Commander, coordinating across Privacy, Privacy Legal, CSIRT, Product, Engineering, and Communications to drive analysis, remediation, and follow-through.
  • Maintain on-call readiness to support privacy incident triage, severity classification, and urgent escalations, ensuring incidents are correctly assessed and routed.
  • Drive privacy incident retrospectives, track resulting remediation items and control gaps, and deliver incident metrics and reporting covering trends, remediation status, and process health.
  • Build and maintain strong cross-functional and cross-geography stakeholder relationships to improve readiness, response quality, and business accountability.
  • Support broader Privacy initiatives during lower-volume periods, including cross-functional efforts, tooling development, and automation projects.
  • 3+ years of experience in privacy, security, incident response, technology risk, or a related operational risk function, including direct experience leading or supporting incident, issue, or risk workflows requiring structured analysis, documentation, and cross-functional coordination.
  • Strong incident management skills with experience communicating privacy risk and incident findings to both technical and non-technical audiences, including producing written incident analyses, retrospective documentation, and executive-level summaries.
  • Proven track record of leading technical investigations within cloud-native architectures, with hands-on proficiency in SQL, Python, and data analysis tools (e.g., Postgres, MongoDB, Airflow, Looker, Snowflake).
  • Demonstrated experience building automation to reduce manual operational tasks and improve incident response efficiency.
  • Working knowledge of privacy regulations and frameworks (e.g., GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, data subject rights) data subject rights, privacy controls, and privacy issue management.
  • Utilizes and builds generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
  • Base salary range (excluding equity and bonus): $135,320—$159,200 USD.
  • Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
  • Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information.

Questions about this role

What is the remote policy?

Coinbase operates as a remote-first company with quarterly in-person working sessions.

What is the seniority level of this position?

The seniority level is not explicitly stated in the job description.

How can I apply for this role?

Candidates can apply through the Coinbase website.

Apply now →

✓ Direct apply: you message the hiring person by email. No ATS.

Similar jobs

Before you apply

  • Legitimate employers never ask you to pay anything to apply or get hired.
  • Never share seed phrases or private keys. No real job needs them.
  • Do not install software ("test tasks", "trading tools", "video call clients") sent during hiring.
  • Check that the application page's domain really belongs to Coinbase.