Compliance officer

Keystone Solutions; Brussel Hoofdstad; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Keystone Solutions seeks a Privacy Expert consultant to support a client on GDPR compliance and ISO 27001/27701 initiatives under NIS2. You will work on-site and in hybrid collaboration with client teams, assisting the DPO and implementing privacy governance.

Responsibilities include updating RoPA, DPIAs, data processing agreements, and existing policies, plus developing a plan to maintain GDPR compliance across the engagement.

Qualifications

• Must have: 3+ years as Legal Expert in privacy projects.
• Must have: 3+ years as Privacy Expert with reference projects.
• Strong data governance experience including RoPA, DPIAs, and data transfers.
• Excellent knowledge of Belgian data protection law and GDPR.
• Fluent English; Dutch or French plus another national language is a plus.

Responsabilités

• Update the RoPA records and maintain accuracy.
• Optimize the DPIA register and complete risk assessments.
• Establish and document a process to maintain RoPA.
• Update data processing agreements with providers and clients.
• Review and update privacy and security policies.
• Demonstrate proactivity and help develop a GDPR compliance plan.

Connaissances

Autonomy

Legal expertise

Privacy expertise

Data governance

RoPA management

DPIAs

Contract governance

ITIL

CIPP/E

English

Dutch or French

Formation

Master's degree in Law

Outils

ITIL

CIPP/E

Description du poste

Mission Overview:

Join Keystone Solutions as a consultant on a mission with our client, an essential entity under NIS2, aiming to obtain ISO 27001/27701 certification in 2027. As a Privacy Expert, you will provide general support to the DPO and contribute to the broader implementation of the GDPR. You will perform all responsibilities and meet all requirements below as a Keystone Solutions consultant working closely with the client.

Key Responsibilities:

• Updating the Record of Processing Activities (RoPA).
• Optimising the register by identifying and completing the necessary Data Protection Impact Assessments (DPIAs).
• Establishing a process for maintaining the register.
• Updating existing data processing agreements, where necessary.
• Updating existing policies, where necessary.
• Demonstrating proactivity and contributing to the development of a plan to maintain GDPR compliance.

Required Skills and Experience:

• Ability to work proactively and autonomously (Must have: Oui).
• Demonstrable experience as a Legal Expert, evidenced by reference projects mentioned in the CV (Must have: 3 Années, Medior).
• Demonstrable experience as a Privacy Expert, evidenced by reference projects mentioned in the CV (Must have: 3 Années, Medior).
• Demonstrable experience in data governance, including data classification, data retention, data transfers, etc., particularly in cloud environments (Must have: Oui).
• Demonstrable experience in establishing and maintaining a Record of Processing Activities (Must have: Oui).
• Demonstrable experience in preparing DPIAs and risk assessments (Must have: Oui).
• Demonstrable experience in the drafting/review of contracts with service providers and clients, specifically regarding information security and privacy aspects (Must have: Oui).
• Demonstrable experience with the relevant technology or domain in question (Must have: 3 Années, Medior).
• Demonstrable knowledge and mastery of Belgian data protection legislation and the GDPR (Must have: Oui).
• Good knowledge of Dutch or French, combined with good knowledge of the other national language (Must have: Oui).
• Good knowledge of English (Must have: Oui).
• Master's degree in Law (Must have: Oui).
• Strong sense of responsibility (Must have: Oui).
• Team player (Must have: Oui).
• Demonstrable experience with ITIL (Should have: Oui).
• Demonstrable knowledge of the Belgian energy market (Should have: Oui).
• Candidate holds a CIPP/E certification or equivalent (Nice to have: Oui).

Consultancy Nature of Work:

As a Keystone Solutions consultant, you will operate on-site and/or in hybrid collaboration with the client's teams, embedding best practices while representing Keystone Solutions throughout the engagement.

Dynamic Projects:

Work on impactful privacy and compliance challenges within a regulated environment, with the potential to engage across varied client initiatives through Keystone Solutions.

Turbo-Charged Learning and Development:

Benefit from a consultancy setting that supports broad learning experiences and professional development aligned to real client needs in privacy, security, and governance.

Ambition Skyrocketing within a Consultancy Framework:

Accelerate your career by delivering measurable outcomes in GDPR, DPIAs, RoPA management, and contractual governance across client engagements as part of Keystone Solutions.

Keystone Solutions Values in a Consultancy Context:

Being a K-Stone means bringing our consultancy mindset and commitment to quality into every client project, working collaboratively and responsibly to deliver sustained compliance outcomes.