The job, in the employer's words
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
As a Privacy Analyst on the Privacy Operations team within Security, you'll play a central role in how Coinbase identifies and manages privacy risk across its products and platforms. This team partners with Legal, Product, and Engineering to perform privacy assessments, manage privacy issues through the product lifecycle, and continuously improve the frameworks and tooling that keep customer data safe. You'll own the execution of complex privacy assessments for new products and features, drive issue remediation, and build scalable processes that embed privacy by design into how Coinbase ships.
What you'll do:
- Own end-to-end privacy assessments for new products and features, synthesizing findings and driving remediation with cross-functional partners across Legal, Product, and Engineering.
- Perform regulatory requirement mapping against the privacy common controls framework and identify where control updates are needed to address evolving obligations.
- Track privacy requirements and issues throughout the product lifecycle, managing escalations and driving timely resolution with business owners.
- Partner with Product and Engineering teams by embedding into roadmap planning processes and advising on privacy-by-design principles for onchain and web3 products.
- Identify and implement automation and AI-driven process improvements to streamline privacy assessments and issue management workflows.
Required Skills and Experience:
- 3+ years in technology risk management with a focus on privacy or security, including hands-on experience conducting privacy assessments (DPIAs/PIAs, data flow reviews, or equivalent).
- Demonstrated ability to map regulatory requirements (GDPR, CCPA, PIPEDA, ePrivacy) to operational controls and validate remediation efforts.
- Proven ability to translate privacy legal guidance and product specs into functional requirements and actionable remediation plans.
- Experience managing a high volume of concurrent assessments while balancing strategic priorities and stakeholder escalations across technical and non-technical audiences.
- Familiarity with applying privacy principles to blockchain, onchain, and web3 products or willingness to develop this expertise rapidly.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Requirements mentioned
- 3+ years in technology risk management with a focus on privacy or security, including hands-on experience conducting privacy assessments (DPIAs/PIAs, data flow reviews, or equivalent).
- Demonstrated ability to map regulatory requirements (GDPR, CCPA, PIPEDA, ePrivacy) to operational controls and validate remediation efforts.
- Proven ability to translate privacy legal guidance and product specs into functional requirements and actionable remediation plans.
- Experience managing a high volume of concurrent assessments while balancing strategic priorities and stakeholder escalations across technical and non-technical audiences.
- Familiarity with applying privacy principles to blockchain, onchain, and web3 products or willingness to develop this expertise rapidly.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
- #LI-Remote
- Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
No Mondays shows this listing as the employer published it. Check the details on the employer's site before you apply.