Senior Product Manager II, Identity & Privacy

Senior Product Manager, Identity & Privacy is a critical role responsible for owning and evolving Strava's authentication, authorization, and access control systems across our iOS, Android, and web platforms. In this role, you'll ensure that millions of athletes worldwide have secure, seamless access to their Strava experience while balancing user convenience with platform security and privacy. This role sits at the intersection of security, user experience, and platform growth, and will also carry meaningful responsibility for Strava's privacy product surface: the controls, consent, and transparency experiences that determine how athletes understand and manage their data and how their activities appear to the public. This is a rare opportunity to own two connected, high-visibility domains.

Responsibilities

Own the product roadmap for Strava's identity platform — sign-up, login, password management, MFA, and account recovery — with a unified experience across iOS, Android, and web; Lead the launch of a single, unified identity service across the Strava Group; Own authorization and access-control systems (role- and attribute-based) balancing usability with security and compliance; Extend login and account recovery to modern standards: OAuth, SSO, biometric authentication, passkeys, OTP, phone-based recovery; Partner closely with Engineering, Security, Legal, and Trust & Safety on session management, secure authentication, and abuse prevention; Own key identity metrics: authentication success rates, account recovery completion, security incidents, user satisfaction; Define and drive a proactive privacy roadmap; Own the athlete-facing privacy experience: consent flows, data settings, deletion, and portability; Partner with Legal to translate regulatory obligations (GDPR, CCPA, and emerging frameworks) into clear product decisions; Define how and to whom athlete data is shared; Represent privacy as a product principle in cross-functional conversations across the org

Requirements

Identity product experience is a must-have: demonstrated ownership of authentication, authorization, or access-control product surfaces at a consumer app or platform; Strong cross-functional partnership skills — especially with Engineering, Security, Legal, and Trust & Safety; Good product judgment and comfort working with AI/ML-driven product decisions; experience using AI-forward development tools (e.g., Claude Code) to accelerate product work; Data fluency — comfortable using Amplitude, SQL, or similar tools to measure authentication funnels, consent rates, and feature adoption; Ability to translate technical and regulatory constraints into clear, user-facing product decisions; Experience with privacy, consent, or data-controls features specifically (GDPR, CCPA, or global frameworks like LGPD, PIPL); Experience unifying identity or account systems across multiple products/brands