Incident Response Manager - Privacy
Core
Own and evolve the privacy incident management program, acting as incident commander to detect, respond to, and learn from privacy incidents involving sensitive data.
Role type
Senior Technical Program Manager (Incident Response)
Builds
Privacy incident response lifecycle, detection workflows, and cross-functional systemic improvements
Domain
AI Safety, Privacy Operations, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
incident response program leadership, cross-functional influence without direct authority, incident trend analysis, operational process scaling, KPI definition and tracking, regulatory breach assessment coordination
Preferred skills
7+ years in technical program management or security/privacy operations, familiarity with GDPR/CCPA/HIPAA, legal background
Technologies
incident management tools, alerting systems, post-mortem frameworks
Responsibilities
Own end-to-end privacy incident management program including detection, triage, containment, and remediation; Serve as incident commander driving coordination across executive, engineering, security, and legal teams; Establish and run incident commander rotations; Drive post-incident accountability and action item tracking; Analyze incident trends to surface systemic risks and root causes; Translate trend analysis into cross-functional initiatives for preventive improvements; Lead incident review forums and ensure learnings are acted upon; Partner with Privacy Legal on notifiability assessments and communications; Develop and maintain incident response documentation and training materials; Partner with detection engineering to improve alert fidelity; Define and track incident management KPIs; Support cross-functional training and tabletop exercises
Seniority
Senior, hands-on IC with strategic oversight
