Data Protection Officer

Job description

We believe it takes great people to create a great product. That’s why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia. We’re looking for a data protection officer/head of privacy to lead our global privacy program. In this role, you'll get a chance to work with our awesome legal, product, engineering, information security, marketing and sales teams to embed privacy and responsible AI into everything we build. If you’re someone who enjoys partnering with teams, finding practical solutions and helping innovation move forward while keeping privacy and data protection at the center, we’d love to meet you! ### Your new adventure: #### **Privacy Program Ownership and Privacy Team Lead:** - Own, maintain and improve Pipedrive’s ISO-certified Privacy Program end to end: create, implement, and coordinate compliance policies, processes and supporting documentation and metrics. - Assist with oversight and management of the Group Record Retention and Management Schedule. - Lead the Privacy Team. #### **Compliance Monitoring and Risk:** - Monitor, identify and apply relevant privacy compliance requirements across all Pipedrive locations and points of sale. - Evaluate business activities across all departments to assess and advise on compliance risks and controls. - Define objectives and goals for compliance ambitions, connecting business interests to compliance adherence. - Proactively conduct and participate in audits and other privacy compliance monitoring activities. - Perform or supervise Data Protection Impact Assessments (DPIAs), Legitimate Interests Assessments (LIAs), and Transfer Impact Assessments (TIAs), determining mitigating measures relevant to the risk level. **AI and Data Enablement:** - Serve as a trusted partner to Product and Engineering teams as they build and deploy (AI) features, ensuring privacy and data protection principles are embedded from the start. - Advise on the privacy implications of AI development, including responsible use of personal data in training and inference. - Help teams navigate the privacy and data protection dimensions of AI use cases, bringing practical guidance rather than just compliance checklists. - Develop, deliver, and measure privacy, AI, and data compliance training for all relevant staff, equipping teams to make good decisions about data use in an AI context. - Stay current on the evolving regulatory landscape around AI and data, and translate those developments into actionable guidance for the business. #### **Cross-Functional Partnership:** - Provide privacy consultancy support at all levels of the business. - Work with Product and Engineering to ensure Privacy by Design and Default principles are followed throughout the software development lifecycle, as well as with Marketing, Sales, InfoSec and Legal. - Ensure privacy and data protection principles are considered in the procurement process for new technologies and services, including AI tooling and vendors. - Ensure data protection principles are applied in due diligence activities, including M&A. - Be part of the incident response team to respond effectively to data breaches in accordance with GDPR, other applicable regulations, and standing policies. - Serve as the point of contact with data protection authorities and data subjects on issues relating to personal data processing. ### Does this sound like you? - Significant international experience in data protection and privacy within a software-as-a-service (SaaS) or technology environment - Practical experience as a data protection officer or in a similar statutory privacy role - Deep knowledge of the General Data Protection Regulation (GDPR) and US privacy regulations, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) - Experience managing privacy programs for a data processor, including sub-processor management and data processing agreements - Strong understanding of how artificial intelligence (AI) and machine learning systems use data and the privacy considerations they create - Experience applying Privacy by Design principles to software development and AI feature development - Proven program management skills, including roadmapping, stakeholder alignment, change management and audit readiness - Familiarity with ISO 27701 or other privacy certification frameworks is a plus - CIPP/E, CIPP/US, CIPM or an equivalent privacy certification is a plus - Familiarity with AI-specific risks, including data leakage, bias in training data and transparency requirements, is a plus - Background in data governance or experience working closely with machine learning operations (MLOps) or data engineering teams is a plus - Experience in customer relationship management (CRM) or business-to-business (B2B) software as a service (SaaS) is a plus ### Why Pipedrive? - **People-first culture** - Be part of a team that values authenticity, champions collaboration, and supports each other—no egos, just teamwork. Work alongside top talent from around the world in an inclusive space where different perspectives fuel our best ideas. Everyone is welcome - **Unlock potential** – Push boundaries, take ownership, and experiment with the latest technologies as we enhance our AI First Vision. We empower bold ideas that drive real change - **We’ve got you** – Your well-being matters. Enjoy flexible hours, wellness perks and SWAG. Think performance-based bonuses, stocks, 28 paid leave days, well-being days, compassionate leave, and even pawternal leave—because we take care of ourselves and our people - **Grow with us** – Whether through mentorship, coaching, or internal mobility, we invest in helping you unlock your potential. Open, honest feedback and clear communication are at our core. We grow together through trust and accountability - **Packed with purpose** – Help 100,000+ small and medium-sized businesses grow and succeed while doing meaningful, customer-driven work **Diversity & Inclusion:** Pipedrive is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. We welcome applications regardless of race, color, religion, age, gender, sexual orientation, gender identity or expression, national origin, disability, veteran status, marital or family status, or any other characteristic protected by applicable law. **Eligibility:** Please note that for this position, we are only able to consider candidates who already possess the legal right to work in Estonia without the need for visa sponsorship or relocation assistance. **Background Checks:** Where permitted by local law and necessitated by the scope of the role (e.g., access to sensitive data), Pipedrive may conduct a pre-employment background check. This will be handled in strict accordance with our [Candidates Privacy Notice](https://www.pipedrive.com/en/jobs/privacy-notice). #LI-Hybrid #LI-MM1