Security & Privacy Expert

Rhox; Schaarbeek; On-site; EUR 95,000 - 140,000; Full time

Benefits offered by this job

DPO certification (nice to have)

Belgian energy market expertise (nice)

Agile project experience (nice)

Occasional travel

Job summary

Rhox is seeking a senior security and privacy expert to provide privacy-focused legal support across contracts, change management and ISMS/PIMS.

You will integrate security and privacy into vendor contracts, update DPIAs and processing records, and drive governance across data handling. Multidisciplinary collaboration with legal, security and IT is essential; travel may be required, English, Dutch and French at C1.

Qualifications

• Eight years of privacy and information security expertise required.
• Eight years as security consultant in data, infra or applications.
• Knowledge of Belgian privacy law and GDPR.
• Experience drafting security and privacy provisions in contracts.
• Experience with DPIAs and risk analyses.
• Proficient in data governance: classification, retention and transfer.
• Master's in Law and multilingual communication in teams.

Responsibilities

• Integrate security and privacy into service-provider contracts.
• Embed security/privacy requirements in change management.
• Update data processing agreements and processing records.
• Define processes for maintaining processing records.
• Improve and maintain ISMS and PIMS.

Skills

Privacy & security expertise

Security consulting (data, infra, app)

GDPR & privacy management

Data governance incl. retention

ISO 27001/27002/27701

ISO2700x knowledge

Contract privacy provisions

DPIAs & risk analyses

Multidisciplinary collaboration

English, Dutch, French (C1)

Education

Master's degree in law

Tools

ISO 27001

ISO 27002

ISO 27701

Job description

We're looking for a senior security and privacy expert to provide privacy-focused legal support. You'll work on contracts, change management and the ISMS and PIMS.

What you'll do

• Integrate security and privacy requirements into service-provider contracts.
• Embed security and privacy requirements in change management.
• Optimise and update data processing agreements.
• Update processing records, including retention periods.
• Define a process for maintaining processing records.
• Improve and maintain the ISMS and PIMS.

What you bring

• Eight years of legal expertise in privacy and information security.
• Eight years as a security consultant in data, infrastructure or applications.
• Privacy management experience and knowledge of Belgian privacy legislation and GDPR.
• Data governance experience covering classification, retention and transfer, including cloud environments.
• Experience implementing ISO 27001, ISO 27002 and ISO 27701.
• Knowledge and experience in information security management (ISO2700x).
• Experience drafting security and privacy provisions in service-provider and customer contracts.
• Experience preparing DPIAs and risk analyses.
• Experience with processing records, data processing agreements and agreement registers.
• A master's degree in law.
• Ability to communicate in multidisciplinary teams and work independently and proactively.
• English, C1.
• Dutch, C1.
• French, C1.

Nice to have

• DPO certification.
• Experience in the Belgian energy market.
• Experience working on agile projects.

Good to know

• Occasional travel to other sites or third-party premises may be required.