Privacy & Information Security Consultant

Datashift NV; Antwerpen; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Datashift NV is seeking a Privacy & Information Security Consultant to help clients integrate privacy, information security, and compliance. You’ll bridge Legal, Compliance, IT, and Security, acting as a DPO when required and guiding GDPR, ISO27001, NIS2, and AI Act implementations.

You will conduct DPIAs, risk assessments, and governance design, deliver training, and support audits and certification projects across industries. Flexible hybrid work from Antwerp HQ and client sites.

Qualifications

• Minimum 5 years in Data Protection with information security expertise.

Responsibilities

• Act as Privacy & Information Security expert; assist clients as external DPO when needed.

Skills

Data Protection

Information Security

DPO

GDPR

ISO27001

NIS2

AI Act

Regulatory Compliance

Risk Assessments

Governance

Training Delivery

Job description

Your role

As a Privacy & Information Security Consultant you help our customers take an integrated approach to privacy, information security, and compliance. You combine hands-on experience as a Data Protection Officer (DPO) with expertise in information security , bridging the gap between Legal, Compliance, IT, and Security .

You advise clients not only on the implementation of the GDPR , but also on ISO27001 , NIS2 , and the AI Act . You translate regulatory requirements into pragmatic organizational and technical measures, helping organizations strengthen their privacy, security, and compliance frameworks.

Depending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles:

• Act as a Privacy & Information Security professional and, where required, as an external Data Protection Officer (DPO), advising and supporting our clients on privacy, information security and regulatory compliance.
• Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.
• Advise on and support the implementation of GDPR, ISO27001, NIS2, and the AI Act.
• Design, implement, and optimize privacy, AI, and information security governance frameworks.
• Prepare and support internal and external audits, compliance assessments, and certification projects.
• Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy, information security, and AI governance.
• Advise management, Legal, IT, and Security stakeholders on governance, risk en compliance.
• Deliver training sessions, workshops, and awareness programs on privacy, information security, and the responsible use of AI

Location: Our headquarters are located in Antwerp. As you'll be working with clients across different locations, we offer a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project.

Requirements

Required Experience

• Minimum 5 years of experience in Data Protection , complemented by expertise in Information Security .
• Certified Data Protection Officer (DPO) combined with hands-on experience acting as DPO
• Experience with all aspects of GDPR Compliance, such as DPIAs, risk assessments, policy development, Data Breach Management, records of processing activities (RoPA), Technical and Organisational Measures (TOMs) Data Subject Rights (DSR),…
• Strong knowledge of NIS2 and ISO27001 , with experience supporting their implementation and practical application within organisations. (Certification is a nice plus)
• Experience preparing and supporting internal and external audits , compliance assessments and certification initiatives.
• Experience developing, implementing and maintaining policies, procedures, standards and governance frameworks related to privacy and information security.
• Experience advising senior management, Legal, IT and Security stakeholders on governance, risk, compliance and cyber resilience.
• Experience delivering training, workshops and awareness sessions on privacy, information security and cybersecurity.
• Experience working in a consultancy environment and supporting clients across multiple industries and sectors.
• Experience advising or supporting public sector organisations is considered a strong asset.
• Languages: Fluent in English and Dutch , with a good understanding of French.
• Knowledge of the AI Act and AI governance is considered an asset.

Ready to make an impact?
Let’s talk.