Senior Privacy & Security Counsel

Rhox; Schaarbeek; On-site; EUR 95,000 - 140,000; Full time

Benefits offered by this job

DPO certification (nice to have)

Belgian energy market expertise (nice)

Agile project experience (nice)

Occasional travel

Job summary

Rhox is seeking a senior security and privacy expert to provide privacy-focused legal support across contracts, change management and ISMS/PIMS.

You will integrate security and privacy into vendor contracts, update DPIAs and processing records, and drive governance across data handling. Multidisciplinary collaboration with legal, security and IT is essential; travel may be required, English, Dutch and French at C1.

Qualifications

• Eight years of privacy and information security expertise required.
• Eight years as security consultant in data, infra or applications.
• Knowledge of Belgian privacy law and GDPR.
• Experience drafting security and privacy provisions in contracts.
• Experience with DPIAs and risk analyses.
• Proficient in data governance: classification, retention and transfer.
• Master's in Law and multilingual communication in teams.

Responsibilities

• Integrate security and privacy into service-provider contracts.
• Embed security/privacy requirements in change management.
• Update data processing agreements and processing records.
• Define processes for maintaining processing records.
• Improve and maintain ISMS and PIMS.

Skills

Privacy & security expertise

Security consulting (data, infra, app)

GDPR & privacy management

Data governance incl. retention

ISO 27001/27002/27701

ISO2700x knowledge

Contract privacy provisions

DPIAs & risk analyses

Multidisciplinary collaboration

English, Dutch, French (C1)

Education

Master's degree in law

Tools

ISO 27001

ISO 27002

ISO 27701

Job description

Rhox is seeking a senior security and privacy expert to provide privacy-focused legal support across contracts, change management and ISMS/PIMS.

You will integrate security and privacy into vendor contracts, update DPIAs and processing records, and drive governance across data handling. Multidisciplinary collaboration with legal, security and IT is essential; travel may be required, English, Dutch and French at C1.