Privacy & Information Security Consultant

h3Privacy Information Security Consultant /h3pAs a strongPrivacy Information Security Consultant, /strong you help our customers take an integrated approach to privacy, information security, and compliance. You bring strong expertise in either strongData Protection or Information Security /strong, complemented by hands-on experience in the other domain, bridging the gap between strongLegal, Compliance, IT, and Security. /strong /ppDepending on your background and expertise, your focus may lie more on privacy and data protection or on information security and governance. You advise clients on the implementation of strongGDPR, ISO 27001, NIS2, /strong and the Belgian strongCyberFundamentals Framework /strong (CyFun), translating regulatory requirements and security standards into pragmatic organizational and technical measures. /ppDepending on your experience, expertise, and our clients' needs, you will take on one or more of the following roles and

responsibilities:
/ppAct as a Privacy Information Security Consultant, advising and supporting clients on data protection, information security, and regulatory compliance. /ppDepending on your expertise, take on responsibilities as an external Data Protection Officer (DPO) or support clients in an advisory CISO capacity. /ppConduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments. /ppAdvise on and support the implementation of GDPR, ISO 27001, NIS2, and CyFun. /ppDesign, implement, maintain, and continuously improve Information Security Management Systems (ISMS) and privacy and information security governance frameworks. /ppPrepare and support internal and external audits, compliance assessments, and certification projects. /ppDevelop, implement, and maintain policies, procedures, standards, and guidelines related to privacy and information security. /ppAdvise management, Legal, IT, and Security stakeholders on governance, risk, compliance, and cyber resilience. /ppDeliver training sessions, workshops, and awareness programs on privacy and information security. /ppDepending on client needs, contribute to projects related to the AI Act and AI governance. /ppemLocation: Our headquarters are located in Antwerp. As you'll be working with clients across different locations,

we offer
a flexible and /emstrongemhybrid working model, /em /strongem combining work from our office (flexible), client sites and home, depending on the needs of the project. /em /ppstrongRequired Experience /strong /ppMinimum strong5 years of relevant professional experience in Data Protection and/or Information Security /strong, with strong expertise in at least one domain and demonstrable hands-on experience in the other. /ppstrongCertified Data Protection Officer (DPO) /strong and strongISO 27001 /strong certification, preferably Lead Implementer or Lead Auditor, /ppStrong knowledge of strongGDPR, NIS2, ISO 27001 and CyFun /strong (AI Act is considered a nice plus) with experience supporting their practical application within organisations. /ppExperience preparing and supporting stronginternal and external audits /strong, compliance assessments, and certification initiatives. /ppExperience developing, implementing, and maintaining strongpolicies, procedures, standards, and governance frameworks /strong related to privacy and information security. /ppExperience advising strongsenior management, Legal, IT, and Security stakeholders /strong on governance, risk, compliance, and cyber resilience. /ppExperience delivering strongtraining, workshops, and awareness sessions /strong on privacy, information security, and cybersecurity. /ppProven experience in a strongconsultancy environment /strong, advising and supporting clients across different industries and sectors, ideally including public sector organisations. /ppLanguages: strongFluent in English and Dutch /strong, with a good understanding of French. /p