Privacy & Information Security Consultant

Netherlands; Antwerpen; Hybride; EUR 70 000 - 100 000; Plein temps

Résumé du poste

We are seeking a Privacy & Information Security Consultant for our Antwerp-based operations. The role blends DPO know-how with hands-on information security and regulatory compliance, bridging Legal, Compliance, IT and Security to implement GDPR, ISO27001, NIS2 and AI Act measures for diverse clients.

You will conduct DPIAs, risk assessments, policy development and awareness trainings, advising senior stakeholders and delivering governance across industries, with strong English and Dutch

Qualifications

• Minimum 5 years of experience in Data Protection, with expertise in Information Security.
• Certified Data Protection Officer (DPO) with hands-on DPO experience.
• Strong knowledge of GDPR, DPIAs, RoPA, TOMs, Data Subject Rights (DSR).
• Knowledge of NIS2 and ISO27001, with implementation experience.
• Experience advising senior management and cross-functional teams on governance and compliance.
• Consultancy experience across multiple industries; public sector exposure is a plus.
• Fluent in English and Dutch; French helpful.

Responsabilités

• Act as external DPO where required, advising clients on privacy and regulatory compliance.
• Lead privacy assessments, DPIAs, gap analyses, risk assessments and maturity evaluations.
• Advise on GDPR, ISO27001, NIS2, and AI Act implementation and practical application.
• Design, implement and maintain privacy, AI, and information security governance frameworks.
• Prepare and support internal and external audits, compliance assessments and certifications.
• Develop, implement and maintain policies, procedures, standards and governance docs.
• Deliver training, workshops and awareness sessions for clients on privacy and cybersecurity.

Connaissances

Data Protection

Information Security

Governance

DPO experience

GDPR

Audits & compliance

Training & awareness

Description du poste

Privacy & Information Security Consultant

Your role

As a Privacy & Information Security Consultant you help our customers take an integrated approach to privacy, information security, and compliance. You combine hands-on experience as a Data Protection Officer (DPO) with expertise in information security, bridging the gap between Legal, Compliance, IT, and Security.

You advise clients not only on the implementation of the GDPR, but also on ISO27001, NIS2, and the AI Act. You translate regulatory requirements into pragmatic organizational and technical measures, helping organizations strengthen their privacy, security, and compliance frameworks.

Depending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles:

Act as a Privacy & Information Security professional and, where required, as an external Data Protection Officer (DPO), advising and supporting our clients on privacy, information security and regulatory compliance.

Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.

Advise on and support the implementation of GDPR, ISO27001, NIS2, and the AI Act.

Design, implement, and optimize privacy, AI, and information security governance frameworks.

Prepare and support internal and external audits, compliance assessments, and certification projects.

Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy, information security, and AI governance.

Advise management, Legal, IT, and Security stakeholders on governance, risk en compliance.

Deliver training sessions, workshops, and awareness programs on privacy, information security, and the responsible use of AI

Location: Our headquarters are located in Antwerp. As you'll be working with clients across different locations, we offer a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project.

Job requirements

Required Experience

Minimum 5 years of experience in Data Protection, complemented by expertise in Information Security.

Certified Data Protection Officer (DPO) combined with hands-on experience acting as DPO

Experience with all aspects of GDPR Compliance, such as DPIAs, risk assessments, policy development, Data Breach Management, records of processing activities (RoPA), Technical and Organisational Measures (TOMs) Data Subject Rights (DSR),…

Strong knowledge of NIS2 and ISO27001, with experience supporting their implementation and practical application within organisations. (Certification is a nice plus)

Experience preparing and supporting internal and external audits, compliance assessments and certification initiatives.

Experience developing, implementing and maintaining policies, procedures, standards and governance frameworks related to privacy and information security.

Experience advising senior management, Legal, IT and Security stakeholders on governance, risk, compliance and cyber resilience.

Experience delivering training, workshops and awareness sessions on privacy, information security and cybersecurity.

Experience working in a consultancy environment and supporting clients across multiple industries and sectors.

Experience advising or supporting public sector organisations is considered a strong asset.

Languages: Fluent in English and Dutch, with a good understanding of French.

Knowledge of the AI Act and AI governance is considered an asset.