Risk Analyst

We believe it takes great people to create a great product. That’s why our team lives our company values, and we hire based on them, too. Since 2010, Pipedrive has been on a mission to support sales and marketing teams with easy-to-use, powerful tools that make everyday work faster and easier. Today, our cloud-based software is trusted by over 100,000 companies and used in 179 countries. We have grown from a five-person team to a truly international company of over 850+ people, representing more than 50 nationalities, with ten offices distributed across Europe and the US. In 2020, Pipedrive received a majority investment from Vista Equity Partners, a global investment firm that invests exclusively in enterprise software, data, and technology-enabled businesses, making Pipedrive the fifth unicorn from Estonia.

The risk analyst is a dual-role position that combines the responsibilities of a security incident manager and a generalist role covering Information Security initiatives, including security awareness and training. This role will be integral in managing security incidents while also supporting various InfoSec activities across the organisation.

If you are someone who will take a proactive approach to identifying and mitigating security risks, enhancing employee awareness, and ensuring the organisation’s compliance with security policies and standards, we'd love to meet you!

The position requires participation in a rotating on-call schedule for incident management to ensure continuous coverage for critical security events.

• Act as an on-call Security Incident Manager (IM), responsible for managing and coordinating responses to security incidents
• Participate in a rotating on-call schedule and handovers between incident managers
• Provide clear and timely communication during incidents to all stakeholders, ensuring transparency and coordination across teams
• Lead post-incident analysis to identify root causes, develop mitigation strategies, and report on incident lessons learned
• Develop and improve incident management playbooks and processes to ensure efficient and repeatable workflows
• Monitor and respond to evolving security threats and trends, ensuring appropriate preventive measures are in place
• Drive the design and implementation of an overall InfoSec awareness program
• Analyze patterns from security incidents and vulnerabilities to identify potential risks and recommend proactive measures
• Provide risk assessments and data-driven insights to support leadership in making informed security-related decisions
• Track and report on key security performance indicators (KPIs) related to both incident management and awareness programs
• Ensure alignment with regulatory requirements (ISO27001, SOC2 Type 2) and compliance standards by developing training and mitigation strategies for identified risks

• Bachelor’s degree in a STEM field (Science, Technology, Engineering, or Mathematics), Cybersecurity or Information Security
• 2+ years of experience in security incident management, incident response, or a similar role in information security
• Familiarity with security frameworks (e.g., SOC2, ISO 27001) and incident management protocols
• Excellent written and verbal communication skills
• Ability to engage with technical and non-technical audiences
• Strong interpersonal skills
• Ability to handle high-pressure situations, provide effective communication, and collaborate with cross-functional teams
• Proactive and adaptable, with the ability to balance multiple responsibilities and manage time effectively
• Experience in security awareness program management, with a focus on training, phishing campaigns, and program development is a plus

• A value-driven work environment where people come first
• A lively bunch of colleagues from over 50 different countries, with offices in Tallinn, Tartu, Lisbon, Prague, London, Dublin, New York, Florida, Riga and Berlin
• A team serious about getting things done while not taking ourselves too seriously
• A world-class working environment full of perks like parties, craft workshops, snacks and, of course, office dogs
• Flexible working hours as long as you’re there for your team members
• Freedom to execute your ideas with a passionate and motivated team supporting you
• Lots of room for personal and career development, with internal and external training opportunities
• Competitive salary and bonus system and all the benefits you’d expect from a great employer (health and accident insurance, health days, a quarterly contribution to sports, in-house coaches, employee discounts and more) 

We are looking for a Risk Analyst to join our team in Tallinn.