Manager, Privacy

Coinbase Careers Page

8h•Hybrid

About The Position

Ready to be pushed beyond what you think you’re capable of? At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system. To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems. Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. Coinbase is looking for a privacy subject matter expert to lead our Privacy operations. In this role, you will work cross-functionally across Legal, Engineering and Product teams to manage complex privacy and data protection projects. You will be encouraged to ideate on how Coinbase approaches privacy topics, while equipping the privacy team to craft roadmaps with their partners and increase privacy maturity.

Requirements

7+ years of experience in Data Protection / Privacy experience
2+ years of experience working within Financial Services or FinTech
Fluency in performing risk assessments and compliance gap assessments against relevant regulatory requirements and driving issues to remediation
Experience in implementing/rolling out privacy tooling at enterprise level
Experience in implementing data protection technical controls
Knowledgeable about privacy by design framework and applying it to complex and rapidly changing products
Articulate the importance of privacy to technical and non-technical stakeholders and deliver training
Experience with developing security/privacy reporting and recommendations that are meaningful, defensible and practical for a variety of audiences
Experience developing and submitting audit and compliance reports to governing bodies, legal entities, and/or external authorities
Experience tracking privacy gaps to remediation
Excellent project management skills
Managing Data Protection requirements across America/EU / UK entities taking into account difference in governance processes
Demonstrates the ability to responsibly use generative AI tools and copilots (e.g., LibreChat, Gemini, Glean) in daily workflows, continuously learn as tools evolve, and apply human-in-the-loop practices to deliver business-ready outputs and drive measurable improvements in efficiency, cost, and quality

Nice To Haves

CIPP/E and other certifications
Experience working within Cloud native environments
You have a relevant BA/BS degree in a technical field or equivalent experience
Experience working within a global company with a complex regulated entity structure

Responsibilities

Conducting gap assessments against GDPR and other relevant Americas/EMEA/ APAC regulations and tracking issues to remediation
Independently perform privacy assessments, data reviews, maturity benchmarking, and operational effectiveness testing against Coinbase’s common controls including:
Oversight and support integration of Privacy enabling solutions at Coinbase (e.g. Tooling for Automated data discovery and classification, ROPA, Data Subject Rights)
Partnering with Platform and Security to implement technology controls to safeguard sensitive data
Oversight into DPIA’s and auditing Coinbase Inc.’s privacy program
Developing, implementing, and scaling Coinbase’s data protection program and governance model in partnership with Privacy Legal including: cross-functional projects focused on issues like user rights and data protection impact assessments, and developing and establishing of data protection safeguards (e.g. for purpose-use limitation, data retention/deletion, etc)
Collaborating closely with DPO and with data protection authorities in Americas as necessary
Partner with Privacy Legal to develop durable, scalable frameworks for addressing data-related incidents, regulatory inquiries, law enforcement demands, user information requests
Support efforts related to user-facing privacy notices, disclosures, and privacy controls/settings, to address product and regulatory developments
Collaborate with product teams to implement privacy-forward, secure, and customer-centric product design
Oversee Privacy Incident Management program including managing privacy incidents and program uplifts