Privacy & Information Security Consultant

Datashift; Antwerpen; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Datashift is seeking a Privacy & Information Security Consultant to help clients integrate privacy, information security, and compliance. You bring deep expertise in data protection or information security, with hands-on capabilities in the other domain, bridging Legal, IT, and Security.

In this consultancy role, you advise on GDPR, ISO 27001, NIS2 and CyFun, conduct DPIAs and audits, design ISMS, and support governance across industries.

Qualifications

• Minimum 5 years of experience in Data Protection and/or Information Security.
• Certified Data Protection Officer (DPO) and ISO 27001 certification (Lead Implementer or Lead Auditor).
• Strong knowledge of GDPR, NIS2, ISO 27001 and CyFun; AI Act a plus.
• Experience supporting internal and external audits, compliance assessments, and certifications.
• Experience developing and maintaining privacy and information security governance frameworks.
• Experience advising senior management and stakeholders on governance, risk, and cyber resilience.
• Experience delivering training and awareness sessions on privacy and information security.

Responsibilities

• Advise and support clients on data protection, information security, and regulatory compliance.
• Act as external DPO or advisory CISO as needed.
• Conduct DPIAs, risk assessments, and maturity assessments.
• Advise on GDPR, ISO 27001, NIS2, and CyFun implementations.
• Design, implement, maintain ISMS and governance frameworks.
• Prepare and support audits, assessments, and certifications.
• Develop and maintain policies, procedures, standards, and guidelines.
• Advise on governance, risk, and cyber resilience with stakeholders.
• Deliver trainings, workshops, and awareness programs.
• Contribute to AI Act and AI governance projects when required.
• Work across industries in a consultancy environment.

Skills

Data protection

Information security

DPO

ISO 27001

NIS2

CyFun

AI Act

Governance

Audits

Training

Education

ISO 27001 Lead Implementer/Lead Auditor

Certified Data Protection Officer (DPO)

Job description

Privacy & Information Security Consultant

Your role

As a Privacy & Information Security Consultant, you help our customers take an integrated approach to privacy, information security, and compliance. You bring strong expertise in either Data Protection or Information Security, complemented by hands‑on experience in the other domain, bridging the gap between Legal, Compliance, IT, and Security.

Depending on your background and expertise, your focus may lie more on privacy and data protection or on information security and governance. You advise clients on the implementation of GDPR, ISO 27001, NIS2, and the Belgian CyberFundamentals Framework (CyFun), translating regulatory requirements and security standards into pragmatic organizational and technical measures.

Depending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles and responsibilities:

Act as a Privacy & Information Security Consultant, advising and supporting clients on data protection, information security, and regulatory compliance.

Depending on your expertise, take on responsibilities as an external Data Protection Officer (DPO) or support clients in an advisory CISO capacity.

Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.

Advise on and support the implementation of GDPR, ISO 27001, NIS2, and CyFun.

Design, implement, maintain, and continuously improve Information Security Management Systems (ISMS) and privacy and information security governance frameworks.

Prepare and support internal and external audits, compliance assessments, and certification projects.

Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy and information security.

Advise management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience.

Deliver training sessions, workshops, and awareness programs on privacy and information security.

Depending on client needs, contribute to projects related to the AI Act and AI governance.

Location: Our headquarters are located in Antwerp. As you'll be working with clients across different locations, we offer a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project.

Required Experience

Minimum 5 years of relevant professional experience in Data Protection and/or Information Security, with strong expertise in at least one domain and demonstrable hands‑on experience in the other.

Certified Data Protection Officer (DPO) and ISO 27001 certification, preferably Lead Implementer or Lead Auditor,

Strong knowledge of GDPR, NIS2, ISO 27001 and CyFun (AI Act is considered a nice plus) with experience supporting their practical application within organisations.

Experience preparing and supporting internal and external audits, compliance assessments, and certification initiatives.

Experience developing, implementing, and maintaining policies, procedures, standards, and governance frameworks related to privacy and information security.

Experience advising senior management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience.

Experience delivering training, workshops, and awareness sessions on privacy, information security, and cybersecurity.

Proven experience in a consultancy environment, advising and supporting clients across different industries and sectors, ideally including public sector organisations.

Languages: Fluent in English and Dutch, with a good understanding of French.