Freelance Privacy & GDPR Expert

EngiFlex; Brussel; Sur place; EUR 83 000 - 152 000; Temps partiel

Résumé du poste

EngiFlex is seeking a part-time freelance privacy professional to support the DPO and Legal Team in expanding GDPR compliance within ISO 27001/27701 and NIS2 frameworks. You will update RoPA, drive DPIAs, and review contracts with data processing partners to ensure ongoing data protection.

You will bring hands-on data governance experience, strong GDPR knowledge, and the ability to translate privacy requirements into practical actions in a Belgian context.

Qualifications

• Extensive experience in data governance, DPIA and RoPA.

Responsabilités

• Update and maintain the RoPA in line with GDPR and ISO objectives.
• Identify DPIA requirements and ensure completion across processing activities.
• Review and update DPAs and privacy-related policies where needed.
• Contribute to a structured plan for ongoing GDPR compliance.

Connaissances

Data governance

DPIA preparation

RoPA maintenance

GDPR knowledge

Contract drafting/review

Multilingual (NL/FR/EN)

Formation

CIPP/E certification

Outils

ITIL

Description du poste

Tasks and responsibilities

This role supports the DPO and the Legal Team in the further rollout of GDPR compliance, within a context shaped by ISO 27001/27701 objectives and NIS2 requirements.

Main responsibilities include:

• Updating and maintaining the Record of Processing Activities (RoPA).
• Improving the processing register by identifying where Data Protection Impact Assessments (DPIAs) are required and ensuring they are completed.
• Setting up a sustainable process to keep the register accurate and up to date.
• Reviewing and updating existing data processing agreements where needed.
• Reviewing and updating existing privacy-related policies where necessary.
• Preparing DPIAs and privacy risk assessments.
• Supporting data governance topics such as data classification, retention and data transfers, especially in cloud-related environments.
• Contributing proactively to a structured plan for maintaining GDPR compliance over time.

Your profile

• You work proactively, take ownership and can operate autonomously.
• You bring solid experience as a legal and privacy professional, supported by relevant reference projects.
• You have hands‑on expertise in data governance, including data classification, data retention and data transfers, particularly in cloud environments.
• You have experience establishing and maintaining a Record of Processing Activities.
• You are comfortable preparing DPIAs and risk assessments.
• You have experience drafting and reviewing contracts with service providers and clients, including data processing agreements.
• You understand the relevant technology or business domain well enough to translate legal and privacy requirements into practical actions.
• You have strong knowledge of the GDPR and Belgian data protection legislation.
• You speak Dutch or French and have a good command of the other national language.
• You also have a good knowledge of English.
• You are a team player with a strong sense of responsibility.
• Knowledge of ITIL is an asset.
• Knowledge of the Belgian energy market is a plus.
• You hold a CIPP/E certification or an equivalent qualification.

This position is based in Brussels.

This position is offered as a part-time freelance role (40%).