Analyst, Privacy (Privacy Assessments)

As a Privacy Analyst on the Privacy Operations team within Security, you'll play a central role in how Coinbase identifies and manages privacy risk across its products and platforms. This team partners with Legal, Product, and Engineering to perform privacy assessments, manage privacy issues through the product lifecycle, and continuously improve the frameworks and tooling that keep customer data safe. You'll own the execution of complex privacy assessments for new products and features, drive issue remediation, and build scalable processes that embed privacy by design into how Coinbase ships.

What you'll do:

• Own end-to-end privacy assessments for new products and features, synthesizing findings and driving remediation with cross-functional partners across Legal, Product, and Engineering.
• Perform regulatory requirement mapping against the privacy common controls framework and identify where control updates are needed to address evolving obligations.
• Track privacy requirements and issues throughout the product lifecycle, managing escalations and driving timely resolution with business owners.
• Partner with Product and Engineering teams by embedding into roadmap planning processes and advising on privacy-by-design principles for onchain and web3 products.
• Identify and implement automation and AI-driven process improvements to streamline privacy assessments and issue management workflows.

Required Skills and Experience:

• 3+ years in technology risk management with a focus on privacy or security, including hands-on experience conducting privacy assessments (DPIAs/PIAs, data flow reviews, or equivalent).
• Demonstrated ability to map regulatory requirements (GDPR, CCPA, PIPEDA, ePrivacy) to operational controls and validate remediation efforts.
• Proven ability to translate privacy legal guidance and product specs into functional requirements and actionable remediation plans.
• Experience managing a high volume of concurrent assessments while balancing strategic priorities and stakeholder escalations across technical and non-technical audiences.
• Familiarity with applying privacy principles to blockchain, onchain, and web3 products or willingness to develop this expertise rapidly.
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.