Senior Privacy Consultant (FR)

CRANIUM•Hasselt, VLG

About The Position

CRANIUM is a Benelux consultancy specialising in Privacy, Security, and Data Management. It combines IT, legal, and business expertise to provide clients with strategic and operational solutions that help them use data in a compliant, secure, and organised way. The Senior Privacy Consultant develops and oversees client privacy programmes, advises on regulatory requirements and developments, and helps clients embed privacy by design and default into their processes. The role includes reviewing data processing activities, conducting privacy scans and audits, maintaining improvement roadmaps, and producing tailored documentation for stakeholders at all levels. The consultant leads data-breach incident response, promotes privacy awareness, maintains communication with regulatory bodies, and represents CRANIUM professionally. The position also involves managing privacy strategies and roadmaps, conducting DPIAs and TIAs, mapping data flows, establishing data governance procedures, delivering training, assessing third-party vendors, and overseeing DPA compliance. The consultant creates GDPR accountability documentation and reports, collaborates across departments, mentors less experienced colleagues, and manages complex projects through timely delivery. The role suits someone interested in digital law and emerging technologies who is communicative, collaborative, creative in problem-solving, and committed to ongoing learning.

Requirements

Master’s or Bachelor’s degree in Law, Information Security, Data Science, or Criminology.
4–6 years of relevant experience in data protection.
DPO Certificate.
Strong knowledge of GDPR, Belgian data privacy laws, and relevant global standards and laws.
Fluency in French and English.
Passion for digital law and interest in emerging trends and technologies.
Creative problem-solving skills, strong communication and interpersonal skills, and ability to work as part of a team.
Eagerness to learn and develop new skills continuously.

Nice To Haves

CIPP/E certification (not mandatory).
Professional knowledge of Dutch.
Knowledge of ISO 27001 and ISO 27701.

Responsibilities

Develop and maintain client privacy roadmaps and strategies.
Provide tailored regulatory advice and guidance based on legal developments.
Conduct and adapt DPIAs and TIAs as necessary.
Map data flows and establish data governance procedures.
Deliver privacy training and awareness initiatives.
Oversee third-party vendor assessments and enforce DPA compliance.
Lead data-breach incident response and develop response plans.
Create comprehensive documentation and reports to ensure GDPR accountability.
Collaborate effectively with stakeholders and departments.
Mentor and support less experienced colleagues.
Manage complex projects and ensure timely delivery.
Develop and oversee comprehensive privacy programmes for clients.
Advise clients based on decisions of the Belgian SA and regulatory updates.
Guide clients in embedding privacy by design and default into their processes.
Review and adapt client data processing activities to ensure compliance.
Conduct privacy scans and audits and update continuous-improvement roadmaps.
Draft documents tailored to stakeholders, including management and C-level audiences.
Promote privacy awareness and identify opportunities to enhance client services and outcomes.
Communicate with regulatory bodies and represent CRANIUM professionally.

Benefits

Attractive and competitive salary with a wide range of extra benefits.
Flexible working arrangements.
Mobility budget adaptable to personal needs or a company car.
Access to the internal CRANIUM Academy and courses through CRANIUM Campus.
Yearly growth budget for personal development and role-relevant certifications.
Regular check-ins with a people manager and career lifecycle support.
Office gym and opportunities for padel and yoga.
Health benefits through Alan, including access to health experts and health insurance.
Ecocheques.
Meal vouchers.
CLA90 bonus.
Flex-Income Plan.
Group insurance.