Consultancy Services Data Protection and Data Security Audit

Vector Synergy; Den Haag; On-site; EUR 70,000 - 90,000; Full time

Job summary

Vector Synergy is looking for a professional with a minimum of 5 years of experience in IT audit, data security, or data protection to assess governance and compliance with relevant frameworks.

Responsibilities include reviewing policies, evaluating controls, and ensuring alignment with international data protection principles. The position is located in Den Haag, Netherlands, and offers an exciting opportunity for qualified individuals.

Qualifications

• Minimum 5 years of relevant professional experience in IT audit, data security, or data protection.
• Familiarity with recognised data protection and security frameworks like GDPR, ISO 27001, or NIST.
• Experience in assessing security controls such as access management and encryption.

Responsibilities

• Assessing the data protection governance structure and roles of key stakeholders.
• Reviewing data protection policies, procedures, and standards.
• Evaluating alignment with regulatory requirements and internal policies.

Skills

IT audit experience

Data security experience

Data protection experience

Analytical skills

Reporting skills

Tools

CISA

CISSP

ISO 27001

Job description

Qualifications

• Minimum 5 years of relevant professional experience in IT audit, data security, or data protection
• Experience in assessing security controls (e.g. access management, encryption, monitoring)
• Familiarity with recognised data protection and security frameworks (e.g. GDPR, ISO 27001, NIST or equivalent)
• Strong analytical and reporting skills

Skills, Knowledge, Experience Required

• Minimum 5 years of relevant professional experience in IT audit, data security, or data protection
• Experience in assessing security controls (e.g. access management, encryption, monitoring)
• Familiarity with recognised data protection and security frameworks (e.g. GDPR, ISO 27001, NIST or equivalent)
• Strong analytical and reporting skills

Duties/Role

• Relevant certifications (e.g. CISA, CISSP, ISO 27001)
• Experience in international organizations or similar environments

Duties/Role (data protection governance and controls)

• Assessing the data protection governance structure, including roles and responsibilities of key stakeholders (e.g. DPO, management, operational teams)
• Reviewing the existence, completeness, and adequacy of data protection policies, procedures, and standards
• Evaluating alignment with applicable regulatory requirements and internal policies
• Assessing logical access controls and user access management
• Reviewing encryption mechanisms (data at rest and in transit)
• Evaluating data loss prevention (DLP) measures
• Reviewing logging, monitoring, and detection of unauthorised activities
• Assessing data classification and handling of sensitive and confidential information
• Reviewing data retention and secure disposal practices
• Evaluating controls over data sharing, including third-party arrangements
• Reviewing processes for detecting, reporting, and responding to incidents
• Assessing escalation and communication mechanisms
• Evaluating monitoring and tracking of security incidents
• Assessing alignment with internationally recognised data protection principles (including, where relevant, standards comparable to GDPR and frameworks applicable to international organisations)
• Reviewing awareness and training initiatives related to data protection and confidentiality

Deadline

11/06/2026

Additional information

If you are interested, for further information, please contact the point of contact for this offer.