Privacy & Information Security Consultant

h3Privacy Information Security Consultant /h3 pbYour role /b /p pAs a bPrivacy Information Security Consultant, /b you help our customers take an integrated approach to privacy, information security, and compliance. You bring strong expertise in either bData Protection or Information Security /b, complemented by hands‑on experience in the other domain, bridging the gap between bLegal, Compliance, IT, and Security. /b /p pDepending on your background and expertise, your focus may lie more on privacy and data protection or on information security and governance. You advise clients on the implementation of bGDPR, ISO 27001, NIS2, /b and the Belgian bCyberFundamentals Framework /b (CyFun), translating regulatory requirements and security standards into pragmatic organizational and technical measures. /p pDepending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles and

responsibilities:
/p pAct as a Privacy Information Security Consultant, advising and supporting clients on data protection, information security, and regulatory compliance. /p pDepending on your expertise, take on responsibilities as an external Data Protection Officer (DPO) or support clients in an advisory CISO capacity. /p pConduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments. /p pAdvise on and support the implementation of GDPR, ISO 27001, NIS2, and CyFun. /p pDesign, implement, maintain, and continuously improve Information Security Management Systems (ISMS) and privacy and information security governance frameworks. /p pPrepare and support internal and external audits, compliance assessments, and certification projects. /p pDevelop, implement, and maintain policies, procedures, standards, and guidelines related to privacy and information security. /p pAdvise management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience. /p pDeliver training sessions, workshops, and awareness programs on privacy and information security. /p pDepending on client needs, contribute to projects related to the AI Act and AI governance. /p pLocation: Our headquarters are located in Antwerp. As you'll be working with clients across different locations,

we offer
a flexible and hybrid working model, combining work from our office (flexible), client sites and home, depending on the needs of the project. /p pbRequired Experience /b /p pMinimum b5 years of relevant professional experience in Data Protection and/or Information Security /b, with strong expertise in at least one domain and demonstrable hands‑on experience in the other. /p pbCertified Data Protection Officer (DPO) /b and bISO 27001 /b certification, preferably Lead Implementer or Lead Auditor, /p pStrong knowledge of bGDPR, NIS2, ISO 27001 and CyFun /b (AI Act is considered a nice plus) with experience supporting their practical application within organisations. /p pExperience preparing and supporting binternal and external audits /b, compliance assessments, and certification initiatives. /p pExperience developing, implementing, and maintaining bpolicies, procedures, standards, and governance frameworks /b related to privacy and information security. /p pExperience advising bsenior management, Legal, IT, and Security stakeholders /b on governance, risk, compliance, and cyber resilience. /p pExperience delivering btraining, workshops, and awareness sessions /b on privacy, information security, and cybersecurity. /p pProven experience in a bconsultancy environment /b, advising and supporting clients across different industries and sectors, ideally including public sector organisations. /p pLanguages: bFluent in English and Dutch /b, with a good understanding of French. /p