For an organization active within vital infrastructure and the energy sector, support is sought for the DPO and the Legal Team. The organization processes large amounts of personal data, making strong privacy governance and correct compliance with GDPR and Belgian privacy legislation essential. Within a broader trajectory around ISO 27001/27701, GDPR, and NIS2, the consultant will contribute to further strengthening the privacy and data governance policy.
What you will do.
- Support the DPO on general privacy issues
- Update and optimize the Record of Processing Activities (RoPA)
- Identify processing operations for which a DPIA is necessary and support its execution
- Set up and implement a structural process for maintaining the processing register
- Review and update existing data processing agreements (DPAs)
- Review and update privacy and data protection policies
- Perform risk analyses regarding privacy and data processing
- Advise on data governance, including data classification, retention periods, and international/cloud data transfers
- Contribute to contracts with service providers and clients from a privacy and information security perspective
- Proactively contribute to a roadmap for structurally maintaining GDPR compliance
- Coordinate with Legal, DPO, IT, and other internal stakeholders
- Contribute to the connection between privacy governance, information security, ISO 27001/27701, and NIS2
Profile
- Master's degree in Law
- Minimum 3 years of demonstrable experience as a Legal Expert
- Minimum 3 years of demonstrable experience as a Privacy Expert
- Demonstrable experience with data governance, including data classification, data retention, and data transfers, preferably in cloud environments
- Experience with drafting and maintaining a RoPA
- Experience with preparing DPIAs and risk analyses
- Experience with drafting and/or reviewing contracts related to information security and privacy
- Thorough knowledge of GDPR and Belgian privacy legislation
- Experience within relevant IT, privacy, or security domains
- A proactive and independent work attitude
- A strong sense of responsibility and good communication skills
- A pronounced team-oriented mindset
Languages.
- Good knowledge of Dutch or French, combined with a good knowledge of the other national language
- Good knowledge of English
Nice to have.
- Experience with ITIL
- Knowledge of the Belgian energy sector
- CIPP/E certification or equivalent certification
- Experience with privacy and information security within a regulated or critical infrastructure environment
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.