Senior Product Manager II, Identity & Privacy
About The Position
Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. Senior Product Manager, Identity & Privacy is a critical role responsible for owning and evolving Strava's authentication, authorization, and access control systems across our iOS, Android, and web platforms. In this role, you'll ensure that millions of athletes worldwide have secure, seamless access to their Strava experience while balancing user convenience with platform security and privacy. This role sits at the intersection of security, user experience, and platform growth, and will also carry meaningful responsibility for Strava's privacy product surface: the controls, consent, and transparency experiences that determine how athletes understand and manage their data and how their activities appear to the public. This is a rare opportunity to own two connected, high-visibility domains. We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office — three days per week.
Requirements
- Identity product experience is a must-have: demonstrated ownership of authentication, authorization, or access-control product surfaces at a consumer app or platform
- Strong cross-functional partnership skills — especially with Engineering, Security, Legal, and Trust & Safety
- Good product judgment and comfort working with AI/ML-driven product decisions; experience using AI-forward development tools (e.g., Claude Code) to accelerate product work
- Data fluency — comfortable using Amplitude, SQL, or similar tools to measure authentication funnels, consent rates, and feature adoption
- Ability to translate technical and regulatory constraints into clear, user-facing product decisions
- Experience with privacy, consent, or data-controls features specifically (GDPR, CCPA, or global frameworks like LGPD, PIPL)
- Experience unifying identity or account systems across multiple products/brands
Responsibilities
- Own the product roadmap for Strava's identity platform — sign-up, login, password management, MFA, and account recovery — with a unified experience across iOS, Android, and web
- Lead the launch of a single, unified identity service across the Strava Group
- Own authorization and access-control systems (role- and attribute-based) balancing usability with security and compliance
- Extend login and account recovery to modern standards: OAuth, SSO, biometric authentication, passkeys, OTP, phone-based recovery
- Partner closely with Engineering, Security, Legal, and Trust & Safety on session management, secure authentication, and abuse prevention
- Own key identity metrics: authentication success rates, account recovery completion, security incidents, user satisfaction
- Define and drive a proactive privacy roadmap
- Own the athlete-facing privacy experience: consent flows, data settings, deletion, and portability
- Partner with Legal to translate regulatory obligations (GDPR, CCPA, and emerging frameworks) into clear product decisions
- Define how and to whom athlete data is shared
- Represent privacy as a product principle in cross-functional conversations across the org
Benefits
- For more information on benefits, please click here.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
