Context You will support the existing DPO function in the operational handling of privacy and data protection matters. This includes managing privacy issues, meetings, and DPIAs. The assignment is carried out in close cooperation with relevant business, legal, security, and IT stakeholders.
Profile You hold a legal background with a Master’s degree in Law or functional equivalent. You have five years of relevant experience in the described tasks within a large or medium-sized organization. Relevant IAPP certifications or equivalents are required. You have demonstrable experience working with multiple stakeholders, connecting different matters and projects, and have a strong team and collaborative spirit.
Assignment You will strengthen the DPO function operationally to handle privacy questions independently, promptly, and to high standards, escalating to the DPO when necessary. You prepare data privacy advice, guide and document DPIAs, handle data subject requests, analyze and document data breaches with follow-up actions including notifications. Collaboration within the DPO office and with business data privacy leads is part of the role.
Responsibilities Prepare well-founded and documented data privacy advice and assessments. Maintain complete DPIA files including risks, measures and clear follow-up actions. Process data requests correctly and timely with demonstrable follow-up. Document assessment and follow-up of data breaches including notification support. Keep up-to-date case follow-up and provide clear reporting to the DPO on status, risks and outstanding actions. Provide practical support and knowledge sharing to stakeholders on data protection.
Acceptance Criteria Demonstrable experience in data protection and privacy compliance, including privacy and GDPR advice to large organizations and independent handling of DPIAs, data subject requests, data breaches, data processing agreements and GDPR processing assessments. Experience supporting a DPO function or similar advisory role in a complex organizational environment is required. Familiarity with practical GDPR application, risk assessments, translating legal analyses into workable recommendations, and guiding stakeholders on privacy matters is essential.
Location Schaerbeek and remote (hybrid, 2 days onsite).