Privacy Incident Response Lead

Anthropic Limited; San Francisco, Northern (CA, KY); Hybrid; USD 290,000 - 365,000; Full time

Job summary

Anthropic Limited is seeking an experienced Incident Response Manager to own and evolve privacy incident management within the privacy team. This senior role focuses on detection, response, remediation, and post-incident review for GDPR, CCPA, HIPAA, and related obligations.

You will lead cross-functional incident response, drive root-cause actions, and partner with Privacy Legal for notifiability, while building scalable processes, metrics, and training to improve organizational resilience.

Qualifications

• 7+ years of experience in technical program management, incident management, or security/privacy operations.
• Familiarity with privacy regulation and breach-notification obligations (GDPR, CCPA, HIPAA) or a legal background.

Responsibilities

• Own the end-to-end privacy incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
• Serve as incident commander for privacy incidents, driving coordination across executive, engineering, security, legal, and other stakeholders.
• Establish incident commander rotations within privacy, ensuring clear ownership during incidents of varying severity.
• Drive post-incident accountability by defining action items, tracking, and ensuring follow-through on tactical fixes and strategic improvements.
• Gather and report incident trends and patterns to surface systemic risks and root causes; translate trends into cross-functional initiatives.

Skills

Incident management

Privacy program

Cross-functional leadership

Data analysis

Communication under pressure

Education

Bachelor's degree

Job description

Anthropic Limited is seeking an experienced Incident Response Manager to own and evolve privacy incident management within the privacy team. This senior role focuses on detection, response, remediation, and post-incident review for GDPR, CCPA, HIPAA, and related obligations.

You will lead cross-functional incident response, drive root-cause actions, and partner with Privacy Legal for notifiability, while building scalable processes, metrics, and training to improve organizational resilience.