Senior Security & Privacy Expert | Freelance | Hybrid – Brussels

About the job

We are looking for a Security & Privacy Expert for a freelance assignment in the Belgian energy sector. The role combines privacy management, legal advisory and information security expertise, with a particular focus on privacy-related activities and general legal support.

The assignment involves integrating security and privacy requirements into contracts and change management processes, improving privacy documentation, and contributing to the maintenance and optimisation of information security and privacy management systems.

Assignment: Freelance – 12 months.

Work setup: Hybrid – Brussels, Belgium. Minimum two working days per week on-site.

Additional on-site attendance may be required, subject to prior coordination. Occasional travel to other offices or third-party locations may also be necessary.

Responsibilities:

-Integrate and follow up on information security and privacy requirements in contracts with service providers.

-Provide legal support on privacy and information security matters.

-Integrate information security and privacy requirements into change management processes.

-Optimise the register of data processing agreements.

-Review and update existing data processing agreements where necessary.

-Update records of processing activities, including data retention periods.

-Establish a process for the ongoing maintenance of records of processing activities.

-Contribute to the optimisation and maintenance of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS).

-Collaborate with multidisciplinary teams on privacy, legal and information security topics.

Must-have requirements:

-Master’s degree in Law.

-Eight years of relevant experience as a Security Consultant in one or more environments such as data, infrastructure or applications.

-Eight years of relevant experience as a legal expert in privacy and information security.

-Experience in these two areas may overlap.

-Demonstrable professional experience in privacy management.

-Strong knowledge of GDPR and Belgian privacy legislation.

-Proven knowledge and practical experience in Information Security Management, including the ISO 2700x family of standards.

-Proven experience implementing ISO 27001, ISO 27002 and ISO 27701.

-Demonstrable experience with records of processing activities, data processing agreements and registers of these agreements.

-Proven experience drafting and reviewing contracts with service providers and customers, specifically their information security and privacy provisions.

-Demonstrable experience in data governance, including data classification, retention and transfers, also in cloud environments.

-Proven experience conducting Data Protection Impact Assessments (DPIAs) and risk assessments.

-Demonstrable experience in the Belgian energy market.

-Proven experience working in an agile project environment.

-Strong communication skills and the ability to collaborate effectively within multidisciplinary teams.

-Ability to work independently and proactively.

-English, Dutch and French at CEFR C1 level.

DPO certification is not mandatory.

Interested? Apply directly through this job post.