Privacy & Information Security Consultant

Your role

As a Privacy & Information Security Consultant, you help our customers take an integrated approach to privacy, information security, and compliance. You bring strong expertise in either Data Protection or Information Security, complemented by hands-on experience in the other domain, bridging the gap between Legal, Compliance, IT, and Security.

Depending on your background and expertise, your focus may lie more on privacy and data protection or on information security and governance. You advise clients on the implementation of GDPR, ISO 27001, NIS2, and the Belgian CyberFundamentals Framework (CyFun), translating regulatory requirements and security standards into pragmatic organizational and technical measures.

Depending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles and responsibilities:

• Act as a Privacy & Information Security Consultant, advising and supporting clients on data protection, information security, and regulatory compliance.
• Depending on your expertise, take on responsibilities as an external Data Protection Officer (DPO) or support clients in an advisory CISO capacity.
• Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.
• Advise on and support the implementation of GDPR, ISO 27001, NIS2, and CyFun.
• Design, implement, maintain, and continuously improve Information Security Management Systems (ISMS) and privacy and information security governance frameworks.
• Prepare and support internal and external audits, compliance assessments, and certification projects.
• Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy and information security.
• Advise management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience.
• Deliver training sessions, workshops, and awareness programs on privacy and information security.
• Depending on client needs, contribute to projects related to the AI Act and AI governance.

Location: Our headquarters are located in Antwerp. As you'll be working with clients across different locations, we offer a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project.

Required Experience

• Minimum 5 years of relevant professional experience in Data Protection and/or Information Security, with strong expertise in at least one domain and demonstrable hands-on experience in the other.
• Certified Data Protection Officer (DPO) and ISO 27001 certification, preferably Lead Implementer or Lead Auditor,
• Strong knowledge of GDPR, NIS2, ISO 27001 and CyFun (AI Act is considered a nice plus) with experience supporting their practical application within organisations.
• Experience preparing and supporting internal and external audits, compliance assessments, and certification initiatives.
• Experience developing, implementing, and maintaining policies, procedures, standards, and governance frameworks related to privacy and information security.
• Experience advising senior management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience.
• Experience delivering training, workshops, and awareness sessions on privacy, information security, and cybersecurity.
• Proven experience in a consultancy environment, advising and supporting clients across different industries and sectors, ideally including public sector organisations.
• Languages: Fluent in English and Dutch, with a good understanding of French.