Privacy Champion

Ypto NV; Brussel Hoofdstad; Hybride; EUR 70 000 - 95 000; Plein temps

Avantages offerts par ce poste

Hybrid working

35 days annual leave

Mobility package with company car or (

Alternative mobility choices

Public transport season ticket

Target bonus

Comprehensive insurance package

Hospitalisation and dental care for 2+

Outpatient medical costs coverage

Group insurance and pension

Meal vouchers

Eco vouchers

Net allowances for hybrid working

Internet allowance

Résumé du poste

Ypto NV, based near Brussels, Belgium, seeks a Privacy Champion to act as the GDPR expert within the Central Data Governance Office. You will collaborate with the SNCB Legal Digital & Data team, the Data Protection Officer, and the Privacy Champion network to implement SNCB's privacy framework within Ypto and promote privacy-by-design across projects.

You will maintain privacy governance, support policy adoption, and translate regulatory requirements into practical actions for local

Qualifications

• Master's degree or equivalent experience; 3-5 years in IT, cybersecurity, risk management, compliance, governance, and 3-5 years in privacy, GDPR or data protection.
• Strong knowledge of GDPR and Belgian privacy legislation.
• Experience with privacy governance, compliance and risk management frameworks.
• Experience performing or reviewing DPIAs and privacy risk assessments.
• Translate regulatory requirements into practical business solutions.
• Professionally proficient in English, Dutch and French.

Responsabilités

• Maintain and improve privacy governance processes, controls and documentation.
• Support implementation and adoption of SNCB privacy policies, standards, procedures and guidelines within Ypto.
• Translate enterprise privacy requirements into practical actions and clear guidance for local stakeholders.
• Support stakeholders in maintaining RoPA, processor registers, privacy assessments and breach documentation.
• Advise on DPIAs, DTIAs, privacy risks, compliance obligations and privacy-by-design practices.
• Represent Ypto in the NMBS/SNCB Privacy Champion network and Privacy Committee.
• Contribute to privacy awareness, training initiatives, reporting, audits and compliance reviews.
• Support privacy requirements in projects, operations and third-party processor assessments.

Connaissances

Privacy governance

Stakeholder engagement

Analytical skills

Communication skills

English proficiency

Dutch proficiency

French proficiency

Regulatory interpretation

Formation

Master's degree or equivalent experience

Description du poste

How do you help make a difference?

As Privacy Champion, you act as the privacy and GDPR subject matter expert within the Central Data Governance Office. In close collaboration with the SNCB Legal Digital & Data team, the Data Protection Officer, and the Privacy Champion network, you support the implementation of SNCB's privacy framework within Ypto. You promote privacy-by-design, strengthen privacy awareness, and help stakeholders fulfil their responsibilities while remaining accountable for their own decisions and obligations.

What is your role at SNCB?

• You maintain and improve privacy governance processes, controls and documentation.
• You support the implementation and adoption of SNCB privacy policies, standards, procedures and guidelines within Ypto.
• You help translate enterprise privacy requirements into practical actions and clear guidance for local stakeholders.
• You support stakeholders in maintaining RoPA, processor registers, privacy assessments and breach documentation.
• You advise on DPIAs, DTIAs, privacy risks, compliance obligations and privacy-by-design practices.
• You represent Ypto in the NMBS/SNCB Privacy Champion network and Privacy Committee.
• You contribute to privacy awareness, training initiatives, reporting, audits and compliance reviews.
• You support privacy requirements in projects, operations and third-party processor assessments.

Why is this job a good fit for you?

You hold a master's degree or equivalent experience and have 3-5 years of experience in IT, cybersecurity, risk management, compliance, governance, and 3-5 years of experience in privacy, GDPR or data protection.

You also possess these technical skills:

• You have strong knowledge of GDPR and Belgian privacy legislation.
• You have knowledge of or a strong interest in AI governance frameworks, Responsible AI principles and the EU AI Act.
• You have experience with privacy governance, compliance and risk management frameworks.
• You understand cybersecurity, information security and privacy standards.
• You have experience performing or reviewing DPIAs and privacy risk assessments.
• You can translate regulatory requirements into practical business solutions.
• You are professionally proficient in English, Dutch and French.

And these soft skills:

• You communicate effectively with operational teams and senior management.
• You have strong analytical, communication and stakeholder engagement skills.
• You promote awareness, collaboration and knowledge sharing across the organisation.
• You demonstrate a commitment to continuously develop privacy expertise through training, certifications, professional communities and regulatory monitoring.

Asset:

• You hold certifications such as CIPP/E, CIPM, CIPT, AIGP, ISO 27001-related certifications or a recognized DPO certification.

Diversity Statement

Everyone is unique. That's why we believe it’s important that you can be yourself —

It makes SNCB stronger. We therefore place great value on diversity and inclusion.

What can you expect from us?

Choosing NMBS/SNCB means choosing to contribute to the digital transformation of the

Belgian railways. You will have a job with social impact and ample opportunity to make

your own contribution. Alongside a healthy work-life balance and a competitive salary, we

offer:

• Hybrid working, with a balanced weekly mix of office and remote work, combined with flexible hours.
• 35 days of annual leave.
• A mobility package with a company car (also available via our mobility plan) or alternative mobility choices, complemented by a public transport season ticket.
• A target bonus.
• A comprehensive insurance package, with hospitalisation and dental care for the whole family.
• Coverage of outpatient medical costs.
• Group insurance, including a supplementary pension (cafeteria plan).
• Meal vouchers & eco vouchers.
• Net allowances for hybrid working and an internet allowance.

Where will you be working?

You will work near Brussels-South station and join the Data Governance team.

We reserve the right to adjust or pause this procedure if necessary. Our recruitment team will select the profiles that best match the job requirements to ensure an optimal fit.

Do you have any further questions?

Ypto recruitment

Mail: [e-mail]