Analyst, Privacy

Coinbase, Inc.; Washington (District of Columbia); Hybrid; USD 135,000 - 159,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k)

Equity and bonus eligibility

Job summary

Coinbase, Inc. is seeking a Privacy Analyst to own the Privacy Incident Management function and partner across Privacy, Security, Product, and Engineering to triage incidents involving personal data and drive remediation in a fast-moving environment.

The role requires 3+ years in privacy or incident response, strong cross-functional coordination, and hands-on experience with SQL, Python, and cloud-native data tools. Remote-friendly with quarterly in-person surges.

Qualifications

• 3+ years of privacy, security, incident response, or related operational risk experience with structured analysis and cross-functional coordination.
• Strong incident management skills, ability to communicate risk and findings to technical and non-technical audiences, and produce executive summaries.
• Proven track record of leading investigations in cloud-native environments with SQL, Python, and data analysis tools.
• Experience building automation to reduce manual tasks and improve response efficiency.
• Working knowledge of GDPR, CCPA, and related privacy frameworks and data subject rights.
• Ability to leverage generative AI responsibly with human oversight to improve workflows.

Responsibilities

• Own end-to-end Privacy Incident Management program, including workflows, escalation, documentation, and responder enablement.
• Lead privacy incident response as DRI and Incident Commander across cross-functional teams.
• Maintain on-call readiness for triage, severity classification, and urgent escalations.
• Drive post-incident retrospectives, track remediation items, and report trends and health metrics.
• Build cross-geography stakeholder relationships to improve readiness and accountability.
• Support broader privacy initiatives, tooling, and automation during low-volume periods.

Skills

Privacy

Incident management

SQL

Python

Data analysis

Cloud-native

Automation

Tools

Postgres

MongoDB

Airflow

Looker

Snowflake

Job description

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for \"good enough\", you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.”learn more about working at Coinbase.

Coinbase's Privacy team is hiring a Privacy Analyst to own the Privacy Incident Management function, reporting to the Head of Privacy. You'll partner across Privacy, Privacy Legal, Security, Product, Engineering, and Communications to triage incidents involving personal data, drive privacy analysis, coordinate remediation, and continuously improve how Coinbase responds to privacy incidents. This role is built for someone who thrives in ambiguity, drives cross-functional coordination during time-sensitive events, and builds durable process improvements in a fast-moving environment.

What you'll do:

• Own the end-to-end Privacy Incident Management program, including notification workflows, escalation paths, process documentation, responder enablement, and automation opportunities.
• Lead privacy incident response as the DRI and Incident Commander, coordinating across Privacy, Privacy Legal, CSIRT, Product, Engineering, and Communications to drive analysis, remediation, and follow-through.
• Maintain on-call readiness to support privacy incident triage, severity classification, and urgent escalations, ensuring incidents are correctly assessed and routed.
• Drive privacy incident retrospectives, track resulting remediation items and control gaps, and deliver incident metrics and reporting covering trends, remediation status, and process health.
• Build and maintain strong cross-functional and cross-geography stakeholder relationships to improve readiness, response quality, and business accountability.
• Support broader Privacy initiatives during lower-volume periods, including cross-functional efforts, tooling development, and automation projects.

Required Skills and Experience:

• 3+ years of experience in privacy, security, incident response, technology risk, or a related operational risk function, including direct experience leading or supporting incident, issue, or risk workflows requiring structured analysis, documentation, and cross-functional coordination.
• Strong incident management skills with experience communicating privacy risk and incident findings to both technical and non-technical audiences, including producing written incident analyses, retrospective documentation, and executive-level summaries.
• Proven track record of leading technical investigations within cloud-native architectures, with hands-on proficiency in SQL, Python, and data analysis tools (e.g., Postgres, MongoDB, Airflow, Looker, Snowflake).
• Demonstrated experience building automation to reduce manual operational tasks and improve incident response efficiency.
• Working knowledge of privacy regulations and frameworks (e.g., GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, data subject rights) data subject rights, privacy controls, and privacy issue management.
• Utilizes and builds generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Position ID: P78172

#LI-Remote

*Pay Transparency Notice:** *Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).

$135,320—$159,200 USD

• *Application Limit: *Candidates may submit a maximum of 3 applications within a 6-month period.
• *Equal Opportunity Employer: *Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
• *US Applicants: *View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
• *Accommodations: *If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com.Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
• *Data Privacy & Arbitration: *By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.