Risk Analyst

We believe it takes great people to create a great product. That's why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data, and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia.

We're looking for a risk analyst to assess and prioritize organizational security risks while managing live security events. In this role, you'll get a chance to work with our awesome information security team on strengthening Pipedrive's risk posture and incident response capabilities.

If you're someone who thrives in a dual-role position that combines proactive analysis with real-time coordination, we'd love to meet you

Your new adventure:

• Lead and refine the company-wide information security risk management program
• Collaborate with cross-functional teams to ensure security is embedded in all initiatives
• Analyze internal and external threats, trends and vulnerability data to identify risks
• Create clear, data-driven risk assessments to support leadership decision-making
• Track and report key performance indicators (KPIs) related to risk and incidents
• Align risk mitigation strategies with ISO 27001 and SOC 2 Type II frameworks
• Serve as on-call security incident manager on a rotating schedule
• Coordinate response to active security incidents and ensure seamless team handovers
• Communicate transparently with stakeholders during incident response
• Lead post-incident reviews and drive long-term fixes
• Maintain and improve incident response playbooks and processes
• Monitor the evolving threat landscape and propose proactive measures
• Help Pipedrive grow by strengthening our security posture through continuous improvement

Does this sound like you?

• Two years of experience in information security, risk management or incident response
• A bachelor's degree in a STEM or related field
• Familiarity with security frameworks such as ISO 27001 and SOC 2, and incident response protocols
• Excellent written and verbal communication skills for both technical and non-technical audiences
• Confidence managing high-pressure situations and engaging with cross-functional teams
• Strong interpersonal skills and the ability to collaborate effectively
• Proactive and adaptable mindset with strong time management skills
• Passion for emerging technologies, including AI and machine learning
• The capability to stay current through self-learning and apply knowledge to real-world challenges
• Experience in security awareness programs, including training and phishing campaigns, is a plus

Why Pipedrive?

• People-first culture - Be part of a team that values authenticity, champions collaboration, and supports each other—no egos, just teamwork. Work alongside top talent from around the world in an inclusive space where different perspectives fuel our best ideas. Everyone is welcome
• Unlock potential - Push boundaries, take ownership, and experiment with the latest technologies as we enhance our AI First Vision. We empower bold ideas that drive real change
• We've got you - Your well-being matters. Enjoy flexible hours, wellness perks and SWAG. Think performance-based bonuses, 28 paid leave days, well-being days, compassionate leave, and even pawternal leave—because we take care of ourselves and our people
• Grow with us - Whether through mentorship, coaching, or internal mobility, we invest in helping you unlock your potential. Open, honest feedback and clear communication are at our core. We grow together through trust and accountability
• Packed with purpose - Help 100,000+ small and medium-sized businesses grow and succeed while doing meaningful, customer-driven work

Pipedrive is an equal opportunity employer. We encourage diversity in the workplace regardless of age, gender, race, religion, disability, sexual orientation, gender identity or veteran status
Based on this role's access to certain data, Pipedrive may conduct a pre-employment background investigation in conjunction with your application for employment with our company. Data from such investigations will be handled in accordance with Pipedrive's Privacy Policy for Recruitment
#LI-Hybrid #LI-MM

We're on the lookout for a Risk Analyst to manage information security risks and coordinate incident response in our information security team.

---