CISO & DPO — Part-Time, Board‑Directed

Luzmo NV; Vlaams-Brabant; Hybride; EUR 60 000 - 90 000; Temps partiel

Résumé du poste

Luzmo NV seeks a Head of Security & Compliance (60% FTE) to establish and govern security and data protection across the product and data flows. You will report to the Board, act as DPO and CISO, and drive independent controls, audits and vendor risk management with direct influence on strategic decisions.

You will collaborate with engineering, legal and operations to implement GDPR compliance, DPIAs and incident response, while maintaining read-only access during audits and ensuring governance

Qualifications

• 5+ years in security, incl. 2 in software security/compliance.
• Technical background with ability to read code and cloud configs.
• Experience running a SOC2 Type II audit.
• Practical GDPR knowledge: DPAs, data transfers, DPIAs, breach notifications.
• Public cloud security experience (AWS, GCP, Azure).
• Experience with security questionnaires and client reviews.
• Independent, pragmatic advisory with clear communication to engineers and board.

Responsabilités

• Set and maintain security and data protection policies and standards.
• Review controls, cloud infra configs, access reviews, and vulnerability handling.
• Run SOC2 Type II program and annual audit with engineering owners.
• Act as DPO: monitor GDPR compliance and data subject requests.
• Answer security questionnaires and assess vendors/subprocessors.
• Review feature designs for security/privacy before build.
• Own incident response and breach notification processes.
• Organize security awareness and secure coding training.
• Report risks, compliance, and progress to the Board.

Connaissances

Security leadership

DPO/GDPR expertise

SOC2 Type II

Public cloud security

Security questionnaires & vendor risk

Independent advisory

Board-level communication

English fluency

Outils

ISO 27001 knowledge

Description du poste

Luzmo NV seeks a Head of Security & Compliance (60% FTE) to establish and govern security and data protection across the product and data flows. You will report to the Board, act as DPO and CISO, and drive independent controls, audits and vendor risk management with direct influence on strategic decisions.

You will collaborate with engineering, legal and operations to implement GDPR compliance, DPIAs and incident response, while maintaining read-only access during audits and ensuring governance