Expert Security & Privacy Consultant – ISO 27701 & GDPR

Pauwels Consulting; Schaarbeek; In loco; EUR 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Pauwels Consulting seeks a senior legal/privacy expert to drive ISO 27701 certification efforts and enhance privacy and information security management. You will integrate controls into contracts, manage DPIAs and RoPA, and support ISMS/PIMS optimization from Brussels.

Fluent in Dutch, French and English, you bring 8+ years of domain experience and a DPO certification. The role offers a 60% work regime in Brussels, with contracts open to permanent staff or freelancers.

Competenze

• 8+ years of legal expertise in privacy and information security.
• 8+ years of security consultancy in data, infrastructure or applications.
• Expert knowledge of ISO 27001/27002/27701 implementations.
• Strong understanding of Belgian privacy law and GDPR.
• Experience in data governance, retention, transfers and cloud security.
• Holder of a DPO certification with ISO 2700x experience.

Mansioni

• Integrate security and privacy into contract management with service providers.
• Embed security and privacy controls within change management processes.
• Maintain RoPA and the data processing register.
• Execute DPIAs and comprehensive risk analyses.
• Update processing agreements and data retention policies.
• Collaborate on ISMS and PIMS maintenance and optimization.

Conoscenze

Privacy expertise

Information security

DPIA management

Risk analysis

RoPA management

Contract drafting

Data governance

ISO 27001/27002/27701

GDPR knowledge

DPO certification

Cross-functional collaboration

Multilingual (Dutch, French, English)

Formazione

Master in Law

Strumenti

ISO 27001

ISO 27002

ISO 27701

Descrizione del lavoro

Our client, a leading organization in the utility sector and an essential entity under NIS2, is seeking an expert to support their journey toward ISO 27701 certification. The role focuses on privacy management, legal support, and the continuous optimization of existing security and privacy management systems.

• Integrate security and privacy requirements into contract management with service providers.
• Embed security and privacy controls within organizational change management processes.
• Optimize and maintain the register of processing agreements and the processing register (RoPA).
• Execute Data Protection Impact Assessments (DPIAs) and comprehensive risk analyses.
• Update and refine existing processing agreements and data retention policies.
• Collaborate on the optimization and maintenance of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS).

• 8+ years of legal expertise in privacy and information security with a Master in Law.
• 8+ years of security consultancy experience within data, infrastructure, or application environments.
• You possess expert knowledge in the implementation of ISO 27001, ISO 27002, and ISO 27701.
• You bring a comprehensive understanding of Belgian privacy legislation and GDPR.
• You have experience in data governance, including data classification, retention, transfers, and cloud security.
• You hold a DPO certification and have proven experience in Information Security Management (ISO 2700x).
• You possess experience managing DPIAs, risk analyses, RoPA, and processing agreements.
• You have experience in drafting and managing information security and privacy aspects of service provider contracts.
• You are proactive, independent, and possess excellent communication skills for collaborating in multidisciplinary teams.
• You are fluent in Dutch, French, and English at a C1 level.

Nice to Haves

• Experience in the Belgian energy market.
• Experience working in Agile project environments.

• Start date: 02/11/2026.
• Duration: 24 months (with potential 12-month extension).
• Work regime: 60%.
• Location: Brussels.
• Contract: open to both permanent employees and freelancers.