Compliance officer privacy & security

• You have both a coordinating and executing role and contribute to the implementation and execution of the privacy and information security policy within the directorate.
• You advise on activities for personal data protection and information security and ensure the implementation of the measures required to comply with BIO and GDPR.
• You have a signaling function (linking pin) towards specialized colleagues from the Privacy and Information Security and Continuity departments within the i-domain.
• You collaborate with colleagues in other directorates within the cluster.
• You play an important role in monitoring the appropriate security level of contracted services and assessing the security level of new services to be contracted.
• Your scope covers the entire directorate and concerns business processes, including the use of systems.
• You are aware of the latest developments in your field of privacy and information security and proactively advise, both substantively and procedurally.
• You establish collaboration with stakeholders and make working agreements for this purpose.
• You also ensure a qualitative and manageable handover document for the internal follow-up of this function and this field.

Activities.

• As a point of contact within the directorate, you perform executive and advisory tasks in the field of privacy protection, digital rights, information security, and information management.
• You ensure the implementation of the measures mentioned in the BIO Improvement Plan and, as a linking pin between the line and the Privacy Officer – Security Officer, you report on the progress of the BIO Improvement Plan and various privacy improvement points.
• You stimulate privacy awareness, ensure compliance with privacy laws and regulations, and regularly give a presentation/training on privacy and information security to all employees of the directorate.
• You coordinate and advise direct colleagues and management on the processing register, processor agreements, DPIAs, security (BIV triad, data breach protocol), privacy, security & archiving by design/default, data subject rights, retention periods, and destruction, etc.
• You ensure that risks are registered in the risk register and monitor the execution of control measures by the line departments.
• As a point of contact for security incidents and data breaches, you have direct contact with the central Privacy & Security Officer and the Personal Data desk.

What they ask

• HBO diploma (higher professional education), preferably in Business Administration.
• Minimum 1 year of work experience in the field of privacy (GDPR) and information security, and with implementing, maintaining, and monitoring information security measures from BIO or ISO27001/2.
• Minimum 3 years of knowledge and experience with IV and ICT projects, with insight into business and organizational processes and monitoring the privacy and information security level of services from internal and external suppliers.

Preferences.

• Relevant certifications in the field of privacy and information security (e.g., ISO27001/2 and/or CISM).
• Experience with BIO (information security and privacy) at a public institution.