Data Protection Expert

Orange; Brussel; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Company car or mobility budget

Homeworking and net allowance

Performance bonus

Meal vouchers

Company car or legal mobility budget

Job summary

Orange Belgium seeks a Data Protection Expert to assist the Data Protection Officer in managing the Personal Data Protection Program, guiding GDPR, e-privacy and AI regulations, and ensuring the protection of personal information.

You will develop policies, review data processing agreements, promote data protection by design, maintain a data inventory, train staff, and handle data subject requests and breach reporting within GDPR timelines.

Qualifications

• Minimum of five years of professional experience in data protection, compliance or a related field.
• Expertise in European Data Protection, Data & AI regulations and practices including an in-depth understanding of the GDPR.
• Experience in handling data breaches, its reporting and mitigation.
• Ability to conduct Data Protection Impact Assessments and risk evaluations.
• Developing and maintaining privacy policies, training programs, and compliance frameworks.
• Providing advice and guidance in relation to all areas of data protection, data & AI regulations from a legal, operational & technical perspective.
• Experience in risk management, able to define a risk method and perform risk analyses.
• Ability to clearly explain GDPR requirements and data protection policies to non-technical colleagues and to balance regulatory requirements with business needs.
• Working effectively with cross-functional teams such as IT, legal, and customer service.
• Demonstrating integrity and confidentiality in handling personal data.
• Fluent in Dutch or French and English

Responsibilities

• Policy Development and Implementation
• Monitor changes to Belgian and EU regulations, laws, guidance and rulings on data protection, privacy & AI compliance and update policies and procedures accordingly.
• Data Processing Agreements: review data protection clauses and data processing agreements with suppliers and B2B customers.
• Data Protection by Design and Default: advise on implementation and promote DPI principles in projects to ensure data minimisation by default.
• Data Inventory and Mapping: maintain a comprehensive record of data processing activities, flows, storage and access controls.
• Training and Awareness: provide training sessions and awareness programs to staff on GDPR compliance and data handling best practices.
• Data Subject Rights Management: facilitate and respond to data subject requests within GDPR timelines.
• DPIAs: assist in conducting DPIAs and threshold analyses for new projects to identify and mitigate privacy risks.
• Review data collection, storage, sharing and deletion to ensure GDPR compliance in collaboration with internal controlling team.

Job description

As a Data Protection Expert, you will assist the Data Protection Officer (DPO) in the management of the Personal Data Protection Program to provide Orange Belgium the necessary guidance enabling to reduce the Data Protection & AI risks, and in particular ensuring that Orange Belgium meets its obligations under the General Data Protection Regulations (GDPR), the e-privacy and other applicable data, data protection, privacy and AI regulations.

You will assist in promoting the transparency and accountability by advising on data protection best practices, conducting risk assessments, and ensuring organizational adherence to GDPR requirements. You will also be responsible for implementing and maintaining policies, procedures, and technical measures to safeguard personal information from unauthorized access, misuse or breaches.

Your main responsibilities:

• Policy Development and Implementation

Monitor changes to the Belgian and EU regulations, laws, guidance and rulings on all matters relating to data protection, privacy & AI compliance ensuring the Orange Belgium takes timely action to develop and update changes in policies, procedures and technical and organizational measures and provide advice and information to all business and technical entities.

• Data Processing Agreements

Assist in reviewing data protection clauses and data processing agreements with suppliers and B2B customers.

• Data Protection by Design and Default

Advice on the implementation of, and promote the principles of data protection by design and by default in all new projects, systems, and processes to ensure data protection is embedded into all stages of development from the beginning and ensuring that only the necessary personal data is processed by default.

• Data Inventory and Mapping

Maintaining a comprehensive record of data processing activities, including data flows, storage, and access controls.

• Training and Awareness

Assist in providing training sessions and awareness programs to staff on GDPR compliance, data handling best practices, and data subject rights.

• Data Subject Rights Management

Facilitating and responding to data subject requests such as access, rectification, erasure, and portability within GDPR timelines.

Help detect, investigate, document, and report personal data breaches to supervisory authorities and affected individuals when required.

• Data Protection Impact Assessments (DPIAs)

Assist in conducting and documenting DPIAs and/or Threshold analyses for new projects or processes involving personal data to identify and mitigate privacy risks.

Review how personal data is collected, stored, shared, and deleted to ensure it follows GDPR principles in collaboration with the Orange Belgium internal controlling team.

Your profile:

• Minimum of five years of professional experience in data protection, compliance or a related field
• Expertise in European Data Protection, Data & AI regulations and practices including an in-depth understanding of the GDPR
• Experience in handling data breaches, its reporting and mitigation
• Ability to conduct Data Protection Impact Assessments and risk evaluations
• Developing and maintaining privacy policies, training programs, and compliance frameworks
• Providing advice and guidance in relation to all areas of data protection, data & AI regulations from a legal, operational & technical perspective
• Experience in risk management, able to define a risk method and perform risk analyses.
• Ability to clearly explain GDPR requirements and data protection policies to non-technical colleagues and to balance regulatory requirements with business needs
• Working effectively with cross-functional teams such as IT, legal, and customer service
• Demonstrating integrity and confidentiality in handling personal data
• Fluent in Dutch or French and English

We offer:

You will make the difference in this highly innovative vibe. As a result, you will develop your full potential by working with highly skilled colleagues and through continuous training. Moreover, you can count on a highly competitive and versatile compensation (market competitive salary, company car or legal mobility budget, homeworking and net allowance, performance bonus, meal vouchers) and benefits package.