Freelance Privacy & GDPR Expert

EngiFlex BV; Brussel Hoofdstad; Hybride; EUR 24 000 - 36 000; Temps partiel

Résumé du poste

EngiFlex BV in Brussels seeks a part-time freelance Privacy & Compliance Expert to reinforce GDPR, ISO 27001/27701, and NIS2 initiatives. You will support the DPO and Legal Team with operational privacy governance, DPIAs and contracts with service providers and clients.

You bring hands-on data governance experience, RoPA ownership, and strong knowledge of Belgian data protection law, with fluency in Dutch or French and good English. This role is 40% FTE and based in Brussels.

Qualifications

• Solid experience as a legal and privacy professional with reference projects.
• Hands-on data governance experience: data classification, retention and transfers, especially in cloud environments.
• Experience establishing and maintaining a Record of Processing Activities (RoPA).
• Experience drafting and reviewing data processing agreements (DPAs).
• Knowledge of GDPR and Belgian data protection law.
• Fluency in Dutch or French with good command of the other national language and English.

Responsabilités

• Support the DPO and Legal Team in GDPR rollout and ongoing privacy initiatives.
• Update RoPA and improve the DPIA process to identify where DPIAs are required.
• Set up a sustainable process to keep the processing register accurate and up to date.
• Review and update DPAs with service providers and clients as needed.
• Review and update privacy-related policies as necessary.
• Prepare DPIAs and privacy risk assessments.
• Support data governance topics like data classification, retention and transfers, especially in cloud environments.
• Contribute to a structured plan for maintaining GDPR compliance over time.

Connaissances

Proactive ownership

Data governance

DPIA prep

RoPA ownership

GDPR knowledge

Contract drafting

Cloud data transfers

Languages: Dutch/French/English

ITIL knowledge

Formation

CIPP/E certification

Outils

ITIL

Description du poste

Tasks and responsibilities

This role supports the DPO and the Legal Team in the further rollout of GDPR compliance, within a context shaped by ISO 27001/27701 objectives and NIS2 requirements.

Main responsibilities include:

• Updating and maintaining the Record of Processing Activities (RoPA).
• Improving the processing register by identifying where Data Protection Impact Assessments (DPIAs) are required and ensuring they are completed.
• Setting up a sustainable process to keep the register accurate and up to date.
• Reviewing and updating existing data processing agreements where needed.
• Reviewing and updating existing privacy-related policies where necessary.
• Preparing DPIAs and privacy risk assessments.
• Supporting data governance topics such as data classification, retention and data transfers, especially in cloud-related environments.
• Contributing proactively to a structured plan for maintaining GDPR compliance over time.

Your profile

• You work proactively, take ownership and can operate autonomously.
• You bring solid experience as a legal and privacy professional, supported by relevant reference projects.
• You have hands-on expertise in data governance, including data classification, data retention and data transfers, particularly in cloud environments.
• You have experience establishing and maintaining a Record of Processing Activities.
• You are comfortable preparing DPIAs and risk assessments.
• You have experience drafting and reviewing contracts with service providers and clients, including data processing agreements.
• You understand the relevant technology or business domain well enough to translate legal and privacy requirements into practical actions.
• You have strong knowledge of the GDPR and Belgian data protection legislation.
• You speak Dutch or French and have a good command of the other national language.
• You also have a good knowledge of English.
• You are a team player with a strong sense of responsibility.
• Knowledge of ITIL is an asset.
• Knowledge of the Belgian energy market is a plus.
• You hold a CIPP/E certification or an equivalent qualification.

This position is based in Brussels.

This position is offered as a part-time freelance role (40%).