Data Protection Officer

We believe it takes great people to create a great product. That’s why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia. We’re looking for a data protection officer/head of privacy to lead our global privacy program. In this role, you'll get a chance to work with our awesome legal, product, engineering, information security, marketing and sales teams to embed privacy and responsible AI into everything we build. If you’re someone who enjoys partnering with teams, finding practical solutions and helping innovation move forward while keeping privacy and data protection at the center, we’d love to meet you! Your new adventure: Privacy Program Ownership and Privacy Team Lead: Own, maintain and improve Pipedrive’s ISO-certified Privacy Program end to end: create, implement, and coordinate compliance policies, processes and supporting documentation and metrics. Assist with oversight and management of the Group Record Retention and Management Schedule. Lead the Privacy Team. Compliance Monitoring and Risk: Monitor, identify and apply relevant privacy compliance requirements across all Pipedrive locations and points of sale. Evaluate business activities across all departments to assess and advise on compliance risks and controls. Define objectives and goals for compliance ambitions, connecting business interests to compliance adherence. Proactively conduct and participate in audits and other privacy compliance monitoring activities. Perform or supervise Data Protection Impact Assessments (DPIAs), Legitimate Interests Assessments (LIAs), and Transfer Impact Assessments (TIAs), determining mitigating measures relevant to the risk level. AI and Data Enablement: Serve as a trusted partner to Product and Engineering teams as they build and deploy (AI) features, ensuring privacy and data protection principles are embedded from the start. Advise on the privacy implications of AI development, including responsible use of personal data in training and inference. Help teams navigate the privacy and data protection dimensions of AI use cases, bringing practical guidance rather than just compliance checklists. Develop, deliver, and measure privacy, AI, and data compliance training for all relevant staff, equipping teams to make good decisions about data use in an AI context. Stay current on the evolving regulatory landscape around AI and data, and translate those developments into actionable guidance for the business. Cross-Functional Partnership: Provide privacy consultancy support at all levels of the business. Work with Product and Engineering to ensure Privacy by Design and Default principles are followed throughout the software development lifecycle, as well as with Marketing, Sales, InfoSec and Legal. Ensure privacy and data protection principles are considered in the procurement process for new technologies and services, including AI tooling and vendors. Ensure data protection principles are applied in due diligence activities, including M&A. Be part of the incident response team to respond effectively to data breaches in accordance with GDPR, other applicable regulations, and standing policies. Serve as the point of contact with data protection authorities and data subjects on issues relating to personal data processing. Does t