Privacy Governance Lead — GDPR & Data Protection Expert (Hybrid)

Ypto; Brussel Hoofdstad; Hybride; EUR 70 000 - 95 000; Plein temps

Avantages offerts par ce poste

Hybrid working

35 days annual leave

Mobility package with company car or *

Public transport season ticket

Target bonus

Insurance package

Meal vouchers

Internet allowance

Résumé du poste

Ypto within SNCB seeks a Privacy Champion to act as the privacy and GDPR subject matter expert in the Central Data Governance Office. You will promote privacy-by-design, strengthen privacy awareness, and guide stakeholders while ensuring accountability for their decisions.

You will collaborate with the SNCB Legal Digital & Data team, DPO and Privacy Champion network, maintaining RoPA and privacy risk assessments and driving DPIAs across the organization.

Qualifications

• Master's degree or equivalent experience.
• 3-5 years of experience in IT, cybersecurity, risk management, compliance, governance.
• 3-5 years of experience in privacy, GDPR or data protection.
• Strong knowledge of GDPR and Belgian privacy legislation.
• Interest in AI governance frameworks and EU AI Act.
• Experience with privacy governance, compliance and risk management frameworks.
• Knowledge of cybersecurity, information security and privacy standards.
• Ability to translate regulatory requirements into practical business solutions.
• Proficiency in English, Dutch and French.

Responsabilités

• Maintain and improve privacy governance processes, controls and documentation.
• Support implementation of SNCB privacy policies, standards and guidelines within Ypto.
• Translate enterprise privacy requirements into practical actions and guidance for local stakeholders.
• Support RoPA, processor registers, privacy assessments and breach documentation.
• Advise on DPIAs, DTIAs, privacy risks and compliance obligations.
• Represent Ypto in the NMBS/SNCB Privacy Champion network and Privacy Committee.
• Contribute to privacy awareness, training, reporting, audits and reviews.
• Support privacy requirements in projects, operations and third-party assessments.

Connaissances

GDPR knowledge

Cybersecurity

Risk management

Governance

English

Dutch

French

Formation

Master's degree or equivalent experience

Description du poste

Ypto within SNCB seeks a Privacy Champion to act as the privacy and GDPR subject matter expert in the Central Data Governance Office. You will promote privacy-by-design, strengthen privacy awareness, and guide stakeholders while ensuring accountability for their decisions.

You will collaborate with the SNCB Legal Digital & Data team, DPO and Privacy Champion network, maintaining RoPA and privacy risk assessments and driving DPIAs across the organization.