Privacy & Information Security Consultant

Data Trust Associates; Antwerpen; Hybride; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Data Trust Associates seeks a Privacy & Information Security Consultant to help clients align privacy, security and compliance. You bridge Legal, IT and Security, acting as an external DPO when needed and guiding governance, risk, and controls across engagements.

Location is Antwerp-based with a hybrid model, combining office time, client sites and remote work. Experience in GDPR, DPIAs and audits is essential for delivery across industries.

Qualifications

• Minimum 5 years of experience in Data Protection with Information Security expertise.
• Certified Data Protection Officer (DPO) with hands-on DPO experience.
• Expertise in GDPR compliance, DPIA, RoPA, TOMs and breach management.
• Strong knowledge of NIS2 and ISO27001 with practical implementation experience.
• Experience in audits, policy development and governance programs.
• Experience advising senior management and cross-functional teams.
• Experience delivering privacy, information security and cybersecurity trainings.
• Consultancy background with multi-industry client work.
• Fluent in English and Dutch; good understanding of French.

Responsabilités

• Advise clients on privacy, information security and regulatory compliance.
• Lead privacy assessments, DPIAs, gap analyses and risk assessments.
• Support GDPR, ISO27001, NIS2 and AI Act implementations.
• Design and optimize privacy, AI and information security governance frameworks.
• Prepare and support audits, assessments and certification projects.
• Develop and maintain privacy and information security policies and guidelines.
• Advise management and stakeholders on governance, risk and cyber resilience.
• Deliver training sessions and awareness programs on privacy and cybersecurity.
• Collaborate with clients across industries in a consultancy setting.

Connaissances

Data Protection

Information Security

DPO role

GDPR

DPIA

Risk assessments

ISO27001

NIS2

AI Act

Governance

Training & awareness

Consultancy

Stakeholder advisory

Description du poste

Privacy & Information Security Consultant

As a Privacy & Information Security Consultant you help our customers take an integrated approach to privacy, information security, and compliance. You combine hands-on experience as a Data Protection Officer (DPO) with expertise in information security, bridging the gap between Legal, Compliance, IT, and Security.

You advise clients not only on the implementation of the GDPR, but also on ISO27001, NIS2, and the AI Act. You translate regulatory requirements into pragmatic organizational and technical measures, helping organizations strengthen their privacy, security, and compliance frameworks.

Depending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles:

• Act as a Privacy & Information Security professional and, where required, as an external Data Protection Officer (DPO), advising and supporting our clients on privacy, information security and regulatory compliance.
• Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.
• Advise on and support the implementation of GDPR, ISO27001, NIS2, and the AI Act.
• Design, implement, and optimize privacy, AI, and information security governance frameworks.
• Prepare and support internal and external audits, compliance assessments, and certification projects.
• Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy, information security, and AI governance.
• Advise management, Legal, IT, and Security stakeholders on governance, risk en compliance.
• Deliver training sessions, workshops, and awareness programs on privacy, information security, and the responsible use of AI.

Location: Our headquarters are located in Antwerp. As you'll be working with clients across different locations, we offer a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project.

Required Experience

• Minimum 5 years of experience in Data Protection, complemented by expertise in Information Security.
• Certified Data Protection Officer (DPO) combined with hands-on experience acting as DPO.
• Experience with all aspects of GDPR Compliance, such as DPIAs, risk assessments, policy development, Data Breach Management, records of processing activities (RoPA), Technical and Organisational Measures (TOMs) Data Subject Rights (DSR),…
• Strong knowledge of NIS2 and ISO27001, with experience supporting their implementation and practical application within organisations. (Certification is a nice plus)
• Experience preparing and supporting internal and external audits, compliance assessments and certification initiatives.
• Experience developing, implementing and maintaining policies, procedures, standards and governance frameworks related to privacy and information security.
• Experience advising senior management, Legal, IT and Security stakeholders on governance, risk, compliance and cyber resilience.
• Experience delivering training, workshops and awareness sessions on privacy, information security and cybersecurity.
• Experience working in a consultancy environment and supporting clients across multiple industries and sectors.
• Experience advising or supporting public sector organisations is considered a strong asset.
• Languages: Fluent in English and Dutch, with a good understanding of French.
• Knowledge of the AI Act and AI governance is considered an asset.