Senior Security

pWe are looking for a bSecurity Privacy Expert /b for a freelance assignment in the bBelgian energy sector /b. The role combines privacy management, legal advisory and information security expertise, with a particular focus on privacy-related activities and general legal support. /p pThe assignment involves integrating security and privacy requirements into contracts and change management processes, improving privacy documentation, and contributing to the maintenance and optimisation of information security and privacy management systems. /p h3Assignment: /h3 pFreelance – 12 months. /p h3Work setup: /h3 pHybrid – Brussels, Belgium. Minimum two working days per week on-site. /p pAdditional on-site attendance may be required, subject to prior coordination. Occasional travel to other offices or third-party locations may also be necessary. /p h3Responsibilities: /h3 ul liIntegrate and follow up on information security and privacy requirements in contracts with service providers. /li liProvide legal support on privacy and information security matters. /li liIntegrate information security and privacy requirements into change management processes. /li liOptimise the register of data processing agreements. /li liReview and update existing data processing agreements where necessary. /li liUpdate records of processing activities, including data retention periods. /li liEstablish a process for the ongoing maintenance of records of processing activities. /li liContribute to the optimisation and maintenance of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS). /li liCollaborate with multidisciplinary teams on privacy, legal and information security topics. /li /ul h3Must-have

requirements:
/h3 ul liMaster’s degree in Law. /li liEight years of relevant experience as a Security Consultant in one or more environments such as data, infrastructure or applications. /li liEight years of relevant experience as a legal expert in privacy and information security. /li liExperience in these two areas may overlap. /li liDemonstrable professional experience in privacy management. /li liStrong knowledge of GDPR and Belgian privacy legislation. /li liProven knowledge and practical experience in Information Security Management, including the ISO 2700x family of standards. /li liProven experience implementing ISO 27001, ISO 27002 and ISO 27701. /li liDemonstrable experience with records of processing activities, data processing agreements and registers of these agreements. /li liProven experience drafting and reviewing contracts with service providers and customers, specifically their information security and privacy provisions. /li liDemonstrable experience in data governance, including data classification, retention and transfers, also in cloud environments. /li liProven experience conducting Data Protection Impact Assessments (DPIAs) and risk assessments. /li liDemonstrable experience in the Belgian energy market. /li liProven experience working in an agile project environment. /li liStrong communication skills and the ability to collaborate effectively within multidisciplinary teams. /li liAbility to work independently and proactively. /li liEnglish, Dutch and French at bCEFR C1 level /b. /li /ul pDPO certification is not mandatory. /p