Risk Analyst

We believe it takes great people to create a great product. That's why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data, and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia.

We're looking for a risk analyst to drive security-awareness, training and behavior-change programs, and help manage our incident response efforts. In this role, you'll get a chance to work with our awesome information security team on both proactive and reactive security operations.

If you're someone who enjoys working across both human risk management and live incident coordination, we'd love to meet you

Your new adventure:

• Lead and continuously improve the company-wide security awareness and training program
• Collaborate with cross-functional teams to promote secure behavior across the organization
• Analyze trends from phishing simulations, incidents and behavioral metrics to identify human-centric risks
• Deliver clear, data-driven assessments that support leadership decision-making
• Align training, policies and awareness efforts with ISO 27001 and SOC 2 Type II requirements
• Track and report key metrics across awareness, phishing, training and incident response
• Serve as on-call incident manager, coordinating end-to-end response for security events
• Communicate transparently with technical and non-technical stakeholders during incidents
• Lead post-incident reviews and help implement long-term fixes
• Improve incident response playbooks for faster, more effective action
• Monitor evolving threats and recommend preventative measures
• Help Pipedrive grow by strengthening our human-risk and incident response capabilities

Does this sound like you?

• Two years of experience in security incident management, incident response, or risk management
• Bachelor's degree in a STEM field or a related discipline
• Familiarity with security frameworks and incident response protocols
• Excellent communication skills for both technical and non-technical audiences
• Strength in cross-functional collaboration and staying calm under pressure
• Proactive, adaptable and comfortable managing multiple responsibilities
• Interest in emerging technologies like AI and machine learning
• A strong can-do attitude, great communication skills and openness to feedback
• A goal-oriented mindset
• The ability to learn continuously and propose new security approaches
• Experience managing security awareness programs is a plus
• Familiarity with phishing campaigns and behavior-change strategies is a plus

Why Pipedrive?

• People-first culture - Be part of a team that values authenticity, champions collaboration, and supports each other—no egos, just teamwork. Work alongside top talent from around the world in an inclusive space where different perspectives fuel our best ideas. Everyone is welcome
• Unlock potential - Push boundaries, take ownership, and experiment with the latest technologies as we enhance our AI First Vision. We empower bold ideas that drive real change
• We've got you - Your well-being matters. Enjoy flexible hours, wellness perks and SWAG. Think performance-based bonuses, 28 paid leave days, well-being days, compassionate leave, and even pawternal leave—because we take care of ourselves and our people
• Grow with us - Whether through mentorship, coaching, or internal mobility, we invest in helping you unlock your potential. Open, honest feedback and clear communication are at our core. We grow together through trust and accountability
• Packed with purpose - Help 100,000+ small and medium-sized businesses grow and succeed while doing meaningful, customer-driven work

Pipedrive is an equal opportunity employer. We encourage diversity in the workplace regardless of age, gender, race, religion, disability, sexual orientation, gender identity or veteran status
Based on this role's access to certain data, Pipedrive may conduct a pre-employment background investigation in conjunction with your application for employment with our company. Data from such investigations will be handled in accordance with Pipedrive's Privacy Policy for Recruitment
#LI-Hybrid #LI-MM

We're on the lookout for a Risk Analyst to lead human risk management initiatives and coordinate security incident responses in our information security team.

---