Privacy Consultant

Support for the DPO and the Legal Team of an organization active in the energy sector.

• Further structuring and practical implementation of the existing GDPR operations.
• Preparation for ISO 27001/27701 and the obligations under NIS2.

What you will do.

• Update and complete the Record of Processing Activities (RoPA).
• Develop a workable process to keep the RoPA structurally up-to-date.
• Identify, draft, and follow up on missing DPIAs.
• Analyze privacy risks and coordinate actions with relevant stakeholders.
• Review and update data processing agreements and privacy and security clauses in contracts.
• Update existing privacy procedures and policy documents.
• Support data classification, retention periods, data transfers, and privacy issues in cloud environments.
• Identify gaps in GDPR operations and translate them into a concrete action plan.
• Provide both content-related and operational support to the DPO.

What they ask

• Master's degree in law.
• At least 3 years of demonstrable experience in privacy and data protection, supplemented by a solid legal foundation.
• Experience working independently on RoPAs, DPIAs, and privacy risk analyses.
• Experience in drafting or reviewing contracts with suppliers or clients, specifically regarding privacy and information security.
• Thorough knowledge of GDPR and Belgian data protection legislation.
• Experience with data governance, such as data classification, data retention, and data transfers, preferably also in cloud environments.
• Ability to independently gather information from Legal, IT, Security, and business teams and practically follow up on agreements made.
• Work proactively, structured, and take responsibility for both content-related and administrative execution.
• Good knowledge of Dutch or French, combined with good professional knowledge of the other national language.
• Good knowledge of English.

Wishes.

• Knowledge of ITIL.
• Knowledge of the Belgian energy market.
• CIPP/E certification.