Senior Cyber & Digital Law Consultant (Hybrid)

CMS Belgium; Brussel; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Offices in Brussels and Antwerp

Certifications funded

Job summary

CMS Belgium is seeking a Senior Consultant to join its cyber and digital regulatory team in Brussels or Antwerp. You will be the calm, structured point of contact for clients in crisis, leading intake, coordinating forensic teams, and advising on GDPR, NIS2 Law, DORA and related obligations.

You will work alongside our lawyers, drafting notifications, supporting decision-making in extortion scenarios, and driving post-incident reviews to translate lessons into concrete improvements.

Qualifications

• Law degree (Master in Laws or equivalent) from an EU-based university.
• 3–5 years in data protection, cybersecurity, technology or digital regulation.
• Genuine interest in technology and threat landscape.
• Fluency in Dutch and English (French a strong plus).
• Ability to explain legal issues clearly to CISOs, IT teams and boards.
• Availability for standby rota.

Responsibilities

• Lead intake and scoping, run status meetings and liaise with cyber insurers.
• Coordinate forensic investigators, IT and security providers, insurers, brokers and crisis communications.
• Assess GDPR, NIS2, DORA and sectoral rules reporting obligations and deadlines.
• Draft notifications to DPA, sectoral supervisors and communications to data subjects and partners.
• Support decision-making in extortion scenarios and sanctions questions.
• Run post-incident reviews and implement concrete improvements.
• Advise on GDPR and Belgian data protection governance, DPIAs, transfers and vendor management.
• Scope NIS2, CyberFundamentals, DORA and Cyber Resilience Act compliance via gap analyses and roadmaps.
• Advise on AI Act, Data Act, Data Governance Act, DSA/DMA, eIDAS, cloud and outsourcing rules.
• Draft and negotiate DPAs, security schedules, SLAs and incident cooperation clauses.
• Build incident response plans, playbooks and tabletop exercises; train legal, IT and exec teams.
• Write guidance, speak at webinars and sector events; grow the practice and retainer offering.

Skills

Data protection

Cybersecurity

Technology understanding

Dutch and English fluency

Communication to CISOs/boards

Standby rota availability

Education

Law degree (EU university)

Tools

CIPP/E/CIPM/CISM/CISSP certifications

Job description

CMS Belgium is seeking a Senior Consultant to join its cyber and digital regulatory team in Brussels or Antwerp. You will be the calm, structured point of contact for clients in crisis, leading intake, coordinating forensic teams, and advising on GDPR, NIS2 Law, DORA and related obligations.

You will work alongside our lawyers, drafting notifications, supporting decision-making in extortion scenarios, and driving post-incident reviews to translate lessons into concrete improvements.