Skip to content
Sign in
All missions

Other

Security & Privacy Expert

Location
Brussels, Belgium
Work mode
On-site
Contract
Contract · Senior
Closed
12 Oct 2026

This mission closed on 12 Oct 2026.

It stays online for reference, but it no longer takes applications.

Open missions like this one

Email me new missions like thisSee all 5 open missions

About the mission

We are looking for a Security & Privacy Expert to join our Security, Privacy & Access team. The role involves integrating security and privacy requirements into contract and change management, optimizing processing agreements, and maintaining our Information Security Management System. The ideal candidate will have extensive experience in privacy management, legal expertise in information security, and a strong understanding of Belgian privacy legislation.

Read the full description

Overview

Atrias and its shareholders (the Belgian distribution network operators) are considered essential entities under the NIS2 legislation. Atrias achieved ISO 27001 certification in 2026 and aims to obtain ISO 27701 certification in 2027. In this context, the Security, Privacy & Access team is looking for a Security & Privacy Expert. The focus will be on:
the privacy aspects of these tasks
general legal support

Key Responsibilities

Specifically, the following tasks are involved:
Integrating/following up on security and privacy requirements in contract management with service providers
Integrating security and privacy requirements in change management
Optimizing the register of processing agreements
Updating existing processing agreements (if necessary)
Updating the processing register (including retention periods) and establishing a process for maintaining the register
Contributing to the optimization and maintenance of Atrias ISMS and PIMS

Skills & Experience

Proven business experience in privacy management (DPO certification) - Must have
Proven experience as a legal expert in privacy and information security - Must have (8 Years, Expert)
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, … - Must have (8 Years, Expert)
Proven experience in data governance (data classification, data retention, data transfer, …) including in cloud environments - Must have
Proven experience in the implementation of ISO27001/ISO27002/ISO27701 - Must have
Proven experience in drafting contracts with service providers and clients, specifically regarding information security and privacy aspects - Must have
Proven experience in developing DPIAs and risk analyses - Must have
Proven experience with processing registers and (registers of) processing agreements - Must have
Proven knowledge and experience regarding Information Security Management (ISO2700x) - Must have
Proven knowledge of Belgian privacy legislation & GDPR - Must have
The candidate holds a Master's degree in law - Must have
The supplier adds a document describing how the candidate can appeal for external support outside Atrias, if necessary - Must have
The candidate can sufficiently demonstrate the necessary communication skills for collaboration within multidisciplinary teams during an interview - Must have
The candidate can sufficiently demonstrate the ability to work independently and proactively during an interview - Must have
Language requirement: English, Dutch, and French at European CEFR level C1 - Must have
Proven experience in the Belgian energy market - Should have
Proven experience in agile project work - Should have

Languages

Language requirement: English, Dutch, and French at European CEFR level C1 - Must have

Additional Info

For this request, DPO certification is not a must
The rate must be an all-in hourly rate.
For organizational reasons and to ensure efficient execution, collaboration, coordination, and follow-up of services, the services are generally performed at least two days a week on-site at the offices, in accordance with the applicable policy at that time regarding office presence. Atrias may, if reasonably necessary for the proper execution of the services, request a broader on-site presence, including for project needs, meetings, onboarding, knowledge transfer, safety requirements, continuity, or other operational reasons. Such broader presence will be coordinated in advance with the project manager or applicable SPOC. Occasional travel to other Atrias locations or third-party locations, including distribution network operators, may also be necessary for the execution of the services. Justified exceptions to the aforementioned presence modalities may be granted by Atrias, considering the nature of the assignment, project needs, operational feasibility, and applicable internal guidelines of Atrias.

What you'll do

  • Integrating/following up on security and privacy requirements in contract management with service providers
  • Integrating security and privacy requirements in change management
  • Optimizing the register of processing agreements
  • Updating existing processing agreements (if necessary)
  • Updating the processing register (including retention periods) and establishing a process for maintaining the register
  • Contributing to the optimization and maintenance of Atrias ISMS and PIMS

What we're looking for

  • Proven business experience in privacy management (DPO certification)
  • Proven experience as a legal expert in privacy and information security (8 Years, Expert)
  • Proven experience as a Security Consultant in data, infrastructure, applications (8 Years, Expert)
  • Proven experience in data governance (data classification, data retention, data transfer) in cloud environments
  • Proven experience in the implementation of ISO27001/ISO27002/ISO27701
  • Proven experience in drafting contracts with service providers and clients regarding information security and privacy aspects
  • Proven experience in developing DPIAs and risk analyses
  • Proven experience with processing registers and processing agreements
  • Proven knowledge and experience regarding Information Security Management (ISO2700x)
  • Proven knowledge of Belgian privacy legislation & GDPR
  • The candidate holds a Master's degree in law
  • The supplier adds a document describing how the candidate can appeal for external support outside Atrias, if necessary
  • The candidate can demonstrate necessary communication skills for collaboration within multidisciplinary teams
  • The candidate can demonstrate the ability to work independently and proactively
  • Language requirement: English, Dutch, and French at European CEFR level C1

Skills

  • Privacy Management
  • Legal Expertise in Privacy and Information Security
  • Security Consulting
  • Data Governance
  • ISO Implementation
  • Contract Management
  • DPIAs and Risk Analyses
  • Processing Registers
  • Information Security Management
  • Belgian Privacy Legislation & GDPR
  • Communication Skills
  • Proactive Work Ability