Compliance officer

keystone-solutions; Brussel; Hybrid; EUR 70,000 - 90,000; Full time

Job summary

Keystone Solutions seeks a Privacy Expert consultant to support a key client on GDPR compliance, RoPA, DPIAs, and DPA updates. You will work on-site and in hybrid mode, collaborating with the client and Keystone teams to deliver compliant data governance.

Strong knowledge of Belgian data protection law, GDPR, and ITIL is essential, with a proactive, team-oriented approach and fluency in English plus Dutch or French. The engagement offers professional growth within a consultancy framework.

Qualifications

• Must be able to work proactively and autonomously.
• 3+ years of experience as a Legal Expert (Medior).
• 3+ years of experience as a Privacy Expert (Medior).
• Experience in data governance, including data classification and retention, especially in cloud environments.
• Experience establishing and maintaining a RoPA.
• Experience drafting/reviewing contracts with service providers and clients regarding information security and privacy.
• Experience with ITIL and knowledge of the Belgian energy market is a plus.

Responsibilities

• Update the RoPA.
• Optimise the DPIA register.
• Establish a process to maintain the register.
• Update data processing agreements as needed.
• Update policies as needed.
• Demonstrate proactivity and help develop a GDPR compliance plan.

Skills

Proactive and autonomous

Dutch or French language knowledge

English language

Team player

Strong sense of responsibility

ITIL

CIPP/E certification

Education

Master's degree in Law

Job description

Mission Overview:

Join Keystone Solutions as a consultant on a mission with our client, an essential entity under NIS2, aiming to obtain ISO 27001/27701 certification in 2027. As a Privacy Expert, you will provide general support to the DPO and contribute to the broader implementation of the GDPR. You will perform all responsibilities and meet all requirements below as a Keystone Solutions consultant working closely with the client.

Key Responsibilities:

• Updating the Record of Processing Activities (RoPA).
• Optimising the register by identifying and completing the necessary Data Protection Impact Assessments (DPIAs).
• Establishing a process for maintaining the register.
• Updating existing data processing agreements, where necessary.
• Updating existing policies, where necessary.
• Demonstrating proactivity and contributing to the development of a plan to maintain GDPR compliance.

Required Skills and Experience:

• Ability to work proactively and autonomously (Must have: Oui).
• Demonstrable experience as a Legal Expert, evidenced by reference projects mentioned in the CV (Must have: 3 Années, Medior).
• Demonstrable experience as a Privacy Expert, evidenced by reference projects mentioned in the CV (Must have: 3 Années, Medior).
• Demonstrable experience in data governance, including data classification, data retention, data transfers, etc., particularly in cloud environments (Must have: Oui).
• Demonstrable experience in establishing and maintaining a Record of Processing Activities (Must have: Oui).
• Demonstrable experience in preparing DPIAs and risk assessments (Must have: Oui).
• Demonstrable experience in the drafting/review of contracts with service providers and clients, specifically regarding information security and privacy aspects (Must have: Oui).
• Demonstrable experience with the relevant technology or domain in question (Must have: 3 Années, Medior).
• Demonstrable knowledge and mastery of Belgian data protection legislation and the GDPR (Must have: Oui).
• Good knowledge of Dutch or French, combined with good knowledge of the other national language (Must have: Oui).
• Good knowledge of English (Must have: Oui).
• Master's degree in Law (Must have: Oui).
• Strong sense of responsibility (Must have: Oui).
• Team player (Must have: Oui).
• Demonstrable experience with ITIL (Should have: Oui).
• Demonstrable knowledge of the Belgian energy market (Should have: Oui).
• Candidate holds a CIPP/E certification or equivalent (Nice to have: Oui).

Consultancy Nature of Work:

As a Keystone Solutions consultant, you will operate on-site and/or in hybrid collaboration with the client's teams, embedding best practices while representing Keystone Solutions throughout the engagement.

Dynamic Projects:

Work on impactful privacy and compliance challenges within a regulated environment, with the potential to engage across varied client initiatives through Keystone Solutions.

Turbo-Charged Learning and Development:

Benefit from a consultancy setting that supports broad learning experiences and professional development aligned to real client needs in privacy, security, and governance.

Ambition Skyrocketing within a Consultancy Framework:

Accelerate your career by delivering measurable outcomes in GDPR, DPIAs, RoPA management, and contractual governance across client engagements as part of Keystone Solutions.

Keystone Solutions Values in a Consultancy Context:

Being a K-Stone means bringing our consultancy mindset and commitment to quality into every client project, working collaboratively and responsibly to deliver sustained compliance outcomes.