Senior Security & Privacy Expert | Freelance | Hybrid – Brussels

Asenium Consulting; Brussel; Hybrid; EUR 129,000 - 221,000; Full time

Job summary

Asenium Consulting is seeking a Security & Privacy Expert for a freelance 12-month assignment in the Belgian energy sector. The role blends privacy management, legal advisory, and information security, with emphasis on privacy activities and contract-driven governance.

The candidate will integrate security and privacy into contracts, improve privacy documentation, and support ISMS/PIMS maintenance alongside cross-functional teams.

Qualifications

• Master’s degree in Law.
• Eight years of Security Consulting experience in data, infrastructure or applications.
• Eight years of legal/privacy and information security experience.
• Demonstrable privacy management experience.

Responsibilities

• Integrate privacy and security requirements into contracts with providers.
• Provide legal support on privacy and information security matters.
• Incorporate privacy and security into change management processes.
• Maintain and optimise data processing agreements registry and DPIAs.

Skills

Privacy management

Information security

GDPR knowledge

ISO 27001/27002/27701

Agile project environment

Strong communication

Independent and proactive

Education

Master’s degree in Law

Tools

ISO 27001

ISO 27002

ISO 27701

Job description

We are looking for a Security & Privacy Expert for a freelance assignment in the Belgian energy sector. The role combines privacy management, legal advisory and information security expertise, with a particular focus on privacy-related activities and general legal support.

The assignment involves integrating security and privacy requirements into contracts and change management processes, improving privacy documentation, and contributing to the maintenance and optimisation of information security and privacy management systems.

Assignment:

Freelance – 12 months.

Work setup:

Hybrid – Brussels, Belgium. Minimum two working days per week on-site.

Additional on-site attendance may be required, subject to prior coordination. Occasional travel to other offices or third-party locations may also be necessary.

Responsibilities:

• Integrate and follow up on information security and privacy requirements in contracts with service providers.
• Provide legal support on privacy and information security matters.
• Integrate information security and privacy requirements into change management processes.
• Optimise the register of data processing agreements.
• Review and update existing data processing agreements where necessary.
• Update records of processing activities, including data retention periods.
• Establish a process for the ongoing maintenance of records of processing activities.
• Contribute to the optimisation and maintenance of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS).
• Collaborate with multidisciplinary teams on privacy, legal and information security topics.

Must-have requirements:

• Master’s degree in Law.
• Eight years of relevant experience as a Security Consultant in one or more environments such as data, infrastructure or applications.
• Eight years of relevant experience as a legal expert in privacy and information security.
• Experience in these two areas may overlap.
• Demonstrable professional experience in privacy management.
• Strong knowledge of GDPR and Belgian privacy legislation.
• Proven knowledge and practical experience in Information Security Management, including the ISO 2700x family of standards.
• Proven experience implementing ISO 27001, ISO 27002 and ISO 27701.
• Demonstrable experience with records of processing activities, data processing agreements and registers of these agreements.
• Proven experience drafting and reviewing contracts with service providers and customers, specifically their information security and privacy provisions.
• Demonstrable experience in data governance, including data classification, retention and transfers, also in cloud environments.
• Proven experience conducting Data Protection Impact Assessments (DPIAs) and risk assessments.
• Demonstrable experience in the Belgian energy market.
• Proven experience working in an agile project environment.
• Strong communication skills and the ability to collaborate effectively within multidisciplinary teams.
• Ability to work independently and proactively.
• English, Dutch and French at CEFR C1 level.

DPO certification is not mandatory.