Privacy & Information Security Consultant

As a Privacy & Information Security Consultant you help our customers take an integrated approach to privacy, information security, and compliance. You combine hands-on experience as a Data Protection Officer (DPO) with expertise in information security, bridging the gap between Legal, Compliance, IT, and Security.

You advise clients not only on the implementation of the GDPR, but also on ISO27001, NIS2, and the AI Act. You translate regulatory requirements into pragmatic organizational and technical measures, helping organizations strengthen their privacy, security, and compliance frameworks.

Depending on your experience, expertise, and our clients’ needs, you will take on one or more of the following roles:

• Act as a Privacy & Information Security professional and, where required, as an external Data Protection Officer (DPO), advising and supporting our clients on privacy, information security and regulatory compliance.
• Conduct and lead privacy assessments, Data Protection Impact Assessments (DPIAs), gap analyses, maturity assessments, and risk assessments.
• Advise on and support the implementation of GDPR, ISO27001, NIS2, and the AI Act.
• Design, implement, and optimize privacy, AI, and information security governance frameworks.
• Prepare and support internal and external audits, compliance assessments, and certification projects.
• Develop, implement, and maintain policies, procedures, standards, and guidelines related to privacy, information security, and AI governance.
• Advise management, Legal, IT, and Security stakeholders on governance, risk en compliance.
• Deliver training sessions, workshops, and awareness programs on privacy, information security, and the responsible use of AI

• Minimum 5 years of experience in Data Protection, complemented by expertise in Information Security.
• Certified Data Protection Officer (DPO) combined with hands-on experience acting as DPO
• Experience with all aspects of GDPR Compliance, such as DPIAs, risk assessments, policy development, Data Breach Management, records of processing activities (RoPA), Technical and Organisational Measures (TOMs) Data Subject Rights (DSR),…
• Strong knowledge of NIS2 and ISO27001, with experience supporting their implementation and practical application within organisations. (Certification is a nice plus)
• Experience preparing and supporting internal and external audits, compliance assessments and certification initiatives.
• Experience developing, implementing and maintaining policies, procedures, standards and governance frameworks related to privacy and information security.
• Experience advising senior management, Legal, IT and Security stakeholders on governance, risk, compliance and cyber resilience.
• Experience delivering training, workshops and awareness sessions on privacy, information security and cybersecurity.
• Experience working in a consultancy environment and supporting clients across multiple industries and sectors.
• Experience advising or supporting public sector organisations is considered a strong asset.
• Languages: Fluent in English and Dutch, with a good understanding of French.
• Knowledge of the AI Act and AI governance is considered an asset. Ready to make an impact?