Senior Consultant in Cyber

pbBrussels or Antwerp Hybrid No bar admission required /b /p pWhen a client is hit by ransomware at 2 a.m., someone has to bring order to the chaos. That means getting /p pforensics moving, mapping the reporting deadlines, briefing the board and handling the insurer. At CMS /p pBelgium, that someone could be you. /p pOur market-leading Technology, Media Communications practice is looking for a Senior Consultant to join /p pits cyber and digital regulatory team. This role is for a legal professional who is as curious about how systems /p pget breached as about what the law requires afterwards. You will work alongside our lawyers, but you don’t /p pneed to be at the bar. We welcome people from law firms, consultancies, in‑house legal or compliance teams, /p pregulators and public authorities. /p h3One role, two sides /h3 pWhen an incident hits, you are the calm, structured point of contact for clients in crisis. You will: /p ul lilead intake and scoping, run status meetings and act as the liaison with cyber insurers /li licoordinate forensic investigators, IT and security providers, insurers, brokers and crisis communications /li liassess reporting obligations under GDPR, the Belgian NIS2 Law, DORA and sectoral rules, and keep every deadline on track /li lidraft notifications to the DPA, the CCB and sectoral supervisors, as well as communications to data subjects, customers and partners /li lisupport decision‑making in extortion scenarios, including the sanctions questions around payment /li lirun post‑incident reviews and turn the lessons into concrete improvements /li /ul pBetween incidents, you help clients get ready and stay compliant. You will: /p ul liadvise on GDPR and Belgian data protection: governance, DPIAs, international transfers, data subject rights and vendor management /li liscope NIS2, CyberFundamentals, DORA and Cyber Resilience Act compliance through gap analyses and roadmaps /li liadvise on the AI Act, Data Act, Data Governance Act, DSA/DMA, eIDAS, and cloud and outsourcing rules /li lidraft and negotiate DPAs, security schedules, SLAs and incident cooperation clauses /li libuild incident response plans, playbooks and tabletop exercises, and train legal, IT and executive teams /li liwrite guidance, speak at webinars and sector events, and help grow the practice and its retainer offering /li /ul h3Who you are /h3 pWhat we need: /p ul lia law degree (Master in Laws or equivalent) from a EU‑based university /li liat least 3–5 years in data protection, cybersecurity, technology or digital regulation /li lia genuine interest in technology: you like understanding how things actually work and you follow the threat landscape /li lifluency in Dutch and English (French is a strong plus) /li lithe ability to explain legal issues clearly to CISOs, IT teams and boards, and to stay composed and discreet under pressure /li liavailability for our standby rota (frequency / compensation) /li /ul pWhat would make you stand out: /p ul lihands‑on experience with breach or incident response /li lifamiliarity with ISO/IEC 27001, CyberFundamentals or the NIST CSF /li licertifications such as CIPP/E, CIPM, CISM or CISSP (we will support you in getting them anyway) /li liexperience in a regulated sector: finance, healthcare, energy, telecoms or critical infrastructure /li lienough technical literacy to hold your own with a forensic team (no engineering degree needed) /li /ul pDon’t tick every box? Apply anyway. We care more about curiosity and judgment than a perfect checklist. /p h3What you get /h3 ul lia senior, visible role with real ownership of matters and direct client contact from day one, and a clear path to a leading role in the cyber practice /li liwork where law, technology and crisis management meet, where no two incidents are the same /li lithe reach of the CMS network: 7,400+ lawyers in 50+ countries, cross‑border matters and secondment opportunities /li liCompetitive remuneration plus bonus, with an annual review /li lia structured development path, with your certifications funded /li lihybrid working and real flexibility, with offices in Brussels and Antwerp /li lia collegial, non‑hierarchical team that takes the work seriously without taking itself too seriously /li liinternational CMS events, trainings, well‑being programmes and sports activities /li /ul h3How it works /h3 pThe process has three steps: an introductory conversation, an interview with the practice leadership including a short case discussion, and a final meeting with the team. /p