Expert Security & Privacy Consultant – ISO 27701 & GDPR

Our client, a leading organization in the utility sector and an essential entity under NIS2, is seeking an expert to support their journey toward ISO 27701 certification. The role focuses on privacy management, legal support, and the continuous optimization of existing security and privacy management systems.

• Integrate security and privacy requirements into contract management with service providers.
• Embed security and privacy controls within organizational change management processes.
• Optimize and maintain the register of processing agreements and the processing register (RoPA).
• Execute Data Protection Impact Assessments (DPIAs) and comprehensive risk analyses.
• Update and refine existing processing agreements and data retention policies.
• Collaborate on the optimization and maintenance of the Information Security Management System (ISMS) and Privacy Information Management System (PIMS).

• 8+ years of legal expertise in privacy and information security with a Master in Law.
• 8+ years of security consultancy experience within data, infrastructure, or application environments.
• You possess expert knowledge in the implementation of ISO 27001, ISO 27002, and ISO 27701.
• You bring a comprehensive understanding of Belgian privacy legislation and GDPR.
• You have experience in data governance, including data classification, retention, transfers, and cloud security.
• You hold a DPO certification and have proven experience in Information Security Management (ISO 2700x).
• You possess experience managing DPIAs, risk analyses, RoPA, and processing agreements.
• You have experience in drafting and managing information security and privacy aspects of service provider contracts.
• You are proactive, independent, and possess excellent communication skills for collaborating in multidisciplinary teams.
• You are fluent in Dutch, French, and English at a C1 level.

Nice to Haves

• Experience in the Belgian energy market.
• Experience working in Agile project environments.

• Start date: 02/11/2026.
• Duration: 24 months (with potential 12-month extension).
• Work regime: 60%.
• Location: Brussels.
• Contract: open to both permanent employees and freelancers.