Freelance klantspecifiek THRIX

We are looking for a part-time (40%) Privacy Consultant

start date: 02/11/2026

end date: 31/10/2027

As part of the activities, the client processes significant volumes of personal data, particularly data relating to customers, connections, technical interventions and consumptions. These processing activities must be strictly governed, both under the GDPR and Belgian data protection legislation, and in light of the increasing information security requirements applicable to critical infrastructure operators.

The Privacy Expert will therefore support the DPO and Legal Team in strengthening privacy governance, updating processing registers and data processing agreements, identifying risks, and aligning internal practices with the requirements of ISO 27001/27701 and NIS2. The client aims to obtain ISO 27001/27701 certification in 2027.

The main focus of the assignment will be to provide general support to the DPO.

More specifically, the responsibilities include:

·         Updating the Record of Processing Activities (RoPA);

·         Optimising the register by identifying and completing the necessary Data Protection Impact Assessments (DPIAs);

·         Establishing a process for maintaining the register;

·         Updating existing data processing agreements, where necessary;

·         Updating existing policies, where necessary;

·         Demonstrating proactivity and contributing to the development of a plan to maintain GDPR compliance.

Skills

·         Ability to work proactively and autonomously

·         Demonstrable experience as a Legal Expert, evidenced by reference projects mentioned in the CV (3 years)

·         Demonstrable experience as a Privacy Expert, evidenced by reference projects mentioned in the CV (3 years)

·         Demonstrable experience in data governance, including data classification, data retention, data transfers, etc., particularly in cloud environments

·         Demonstrable experience in establishing and maintaining a Record of Processing Activities

·         Demonstrable experience in preparing DPIAs and risk assessments

·         Demonstrable experience in the drafting/review of contracts with service providers and clients, specifically regarding information security and privacy aspects

·         Demonstrable experience with the relevant technology or domain in question (3 years)

·         Demonstrable knowledge and mastery of Belgian data protection legislation and the GDPR

·         Good knowledge of Dutch or French, combined with good knowledge of the other national language

·         Good knowledge of English

·         Master’s degree in Law

·         Strong sense of responsibility

·         Team player

·         Demonstrable experience with ITIL

·         Demonstrable knowledge of the Belgian energy market

·         Candidate holds a CIPP/E certification or equivalent