Data Protection Officer

Pipedrive; Greater London; On-site; GBP 100,000 - 140,000; Full time

Benefits offered by this job

Performance-based bonuses

Stocks

28 paid leave days

Well-being days

Compassionate leave

Pawternal leave

Job summary

Pipedrive is seeking a data protection officer/head of privacy to lead and evolve our global privacy program within the legal, risk & compliance team. You will partner with Product, Engineering, InfoSec, and Marketing to embed privacy by design and responsible AI across our products and processes.

We value practical solutions, cross-functional collaboration, and the ability to navigate GDPR, CCPA/CPRA, and evolving AI regulations while protecting customer data.

Qualifications

• Significant international data protection experience in SaaS/tech.
• Hands-on experience as a data protection officer or similar role.
• Deep knowledge of GDPR and US privacy regulations (CCPA/CPRA).
• Experience managing privacy programs for data processors and DPAs.
• Familiarity with AI-specific privacy risks and responsible use.
• Proven ability in program management, roadmapping and audit readiness.

Responsibilities

• Own and evolve Pipedrive’s privacy program end-to-end and lead the privacy team.
• Monitor privacy compliance across locations, assess risks, and define controls.
• Advise on AI privacy implications and responsible use of personal data.
• Develop privacy training and translate regulations into actionable guidance.
• Provide privacy consultancy across product, engineering, marketing, and operations.
• Support due diligence, M&A, and incident response per GDPR and policy.

Skills

International experience

DPO experience

GDPR and US privacy regulations

Privacy program management

AI privacy considerations

Program governance & audits

Tools

ISO 27701

CIPP/E

CIPP/US

CIPM

Job description

We believe it takes great people to create a great product. That's why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia.

We're looking for a data protection officer/head of privacy to lead our global privacy program. In this role, you'll get a chance to work with our awesome legal, product, engineering, information security, marketing and sales teams to embed privacy and responsible AI into everything we build.

If you're someone who enjoys partnering with teams, finding practical solutions and helping innovation move forward while keeping privacy and data protection at the center, we'd love to meet you!

Privacy Program Ownership and Privacy Team Lead:

• Own, maintain and improve Pipedrive’s ISO-certified Privacy Program end to end: create, implement, and coordinate compliance policies, processes and supporting documentation and metrics.
• Assist with oversight and management of the Group Record Retention and Management Schedule.
• Lead the Privacy Team.

Compliance Monitoring and Risk:

• Monitor, identify and apply relevant privacy compliance requirements across all Pipedrive locations and points of sale.
• Evaluate business activities across all departments to assess and advise on compliance risks and controls.
• Define objectives and goals for compliance ambitions, connecting business interests to compliance adherence.
• Proactively conduct and participate in audits and other privacy compliance monitoring activities.
• Perform or supervise Data Protection Impact Assessments (DPIAs), Legitimate Interests Assessments (LIAs), and Transfer Impact Assessments (TIAs), determining mitigating measures relevant to the risk level.

AI and Data Enablement:

• Serve as a trusted partner to Product and Engineering teams as they build and deploy (AI) features, ensuring privacy and data protection principles are embedded from the start.
• Advise on the privacy implications of AI development, including responsible use of personal data in training and inference.
• Help teams navigate the privacy and data protection dimensions of AI use cases, bringing practical guidance rather than just compliance checklists.
• Develop, deliver, and measure privacy, AI, and data compliance training for all relevant staff, equipping teams to make good decisions about data use in an AI context.
• Stay current on the evolving regulatory landscape around AI and data, and translate those developments into actionable guidance for the business.

Cross-Functional Partnership:

• Provide privacy consultancy support at all levels of the business.
• Work with Product and Engineering to ensure Privacy by Design and Default principles are followed throughout the software development lifecycle, as well as with Marketing, Sales, InfoSec and Legal.
• Ensure privacy and data protection principles are considered in the procurement process for new technologies and services, including AI tooling and vendors.
• Ensure data protection principles are applied in due diligence activities, including M&A.
• Be part of the incident response team to respond effectively to data breaches in accordance with GDPR, other applicable regulations, and standing policies.
• Serve as the point of contact with data protection authorities and data subjects on issues relating to personal data processing.

• Significant international experience in data protection and privacy within a software-as-a-service (SaaS) or technology environment
• Practical experience as a data protection officer or in a similar statutory privacy role
• Deep knowledge of the General Data Protection Regulation (GDPR) and US privacy regulations, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Experience managing privacy programs for a data processor, including sub-processor management and data processing agreements
• Strong understanding of how artificial intelligence (AI) and machine learning systems use data and the privacy considerations they create
• Experience applying Privacy by Design principles to software development and AI feature development
• Proven program management skills, including roadmapping, stakeholder alignment, change management and audit readiness
• Familiarity with ISO 27701 or other privacy certification frameworks is a plus
• CIPP/E, CIPP/US, CIPM or an equivalent privacy certification is a plus
• Familiarity with AI-specific risks, including data leakage, bias in training data and transparency requirements, is a plus
• Background in data governance or experience working closely with machine learning operations (MLOps) or data engineering teams is a plus
• Experience in customer relationship management (CRM) or business-to-business (B2B) software as a service (SaaS) is a plus

• People-first culture - Be part of a team that values authenticity, champions collaboration, and supports each other—no egos, just teamwork. Work alongside top talent from around the world in an inclusive space where different perspectives fuel our best ideas. Everyone is welcome
• Unlock potential – Push boundaries, take ownership, and experiment with the latest technologies as we enhance our AI First Vision. We empower bold ideas that drive real change
• We've got you – Your well-being matters. Enjoy flexible hours, wellness perks and SWAG. Think performance-based bonuses, stocks, 28 paid leave days, well-being days, compassionate leave, and even pawternal leave—because we take care of ourselves and our people
• Grow with us – Whether through mentorship, coaching, or internal mobility, we invest in helping you unlock your potential. Open, honest feedback and clear communication are at our core. We grow together through trust and accountability
• Packed with purpose – Help 100,000+ small and medium-sized businesses grow and succeed while doing meaningful, customer-driven work

Diversity & Inclusion:

Pipedrive is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. We welcome applications regardless of race, color, religion, age, gender, sexual orientation, gender identity or expression, national origin, disability, veteran status, marital or family status, or any other characteristic protected by applicable law.

Eligibility:

Please note that for this position, we are only able to consider candidates who already possess the legal right to work in Estonia without the need for visa sponsorship or relocation assistance.

Background Checks:

Where permitted by local law and necessitated by the scope of the role (e.g., access to sensitive data), Pipedrive may conduct a pre-employment background check. This will be handled in strict accordance with our Candidates Privacy Notice.

We're on the lookout for a data protection officer/head of privacy to lead and evolve our privacy program while enabling the responsible use of artificial intelligence (AI) across our products and internal tooling in our legal, risk & compliance team.