Data Privacy & Information Security Consultant

As a Data Privacy Consultant within our ICT Risk practice, you will support leading financial institutions in strengthening their data protection frameworks, managing privacy-related risks and ensuring compliance with applicable regulatory requirements.

Responsibilities

Advising clients on legal, organizational and technical aspects of data privacy, data protection and information security, providing pragmatic and business-oriented recommendations; Conducting privacy and data protection risk assessments, identifying potential compliance gaps and recommending appropriate mitigation measures; Supporting the implementation and continuous improvement of privacy governance frameworks, policies, standards and procedures; Assisting clients in achieving and maintaining compliance with applicable data protection regulations, particularly the General Data Protection Regulation (GDPR); Performing gap analyses, impact assessments and compliance reviews to evaluate existing processes and identify opportunities for improvement; Supporting the implementation of new regulatory requirements by translating legal obligations into operational processes and business controls; Bridging the gap between business, IT, legal and compliance teams to ensure effective implementation of privacy and data protection measures; Contributing to the development and execution of Data Protection Impact Assessments (DPIAs) and other privacy-related assessments; Designing and delivering privacy awareness initiatives and training sessions for various stakeholders; Managing relationships with key client stakeholders and ensuring the successful delivery of consulting engagements; Collaborating with colleagues across the ICT Risk practice and contributing to the development of methodologies, proposals and knowledge-sharing initiatives

Requirements

A bachelor's or master's degree in Law, Information Technology, Cybersecurity, Business or a related field, or equivalent professional experience; Relevant professional experience or demonstrable expertise in data privacy, data protection, information security or regulatory compliance; A strong understanding of privacy and data protection principles, particularly within the European regulatory environment; Knowledge of GDPR and its practical implications for organizations, business processes and information systems; Experience implementing or supporting privacy policies, procedures, compliance frameworks or regulatory requirements; An interest in working with organizations in the financial services industry and other regulated environments; Good knowledge of French OR Dutch (both written and spoken), combined with strong English communication skills; Strong analytical and problem-solving abilities, with the capacity to translate complex regulatory requirements into actionable business solutions; Excellent communication, presentation and interpersonal skills; Ability to engage effectively with diverse stakeholders, including business representatives, legal professionals, compliance teams and technical specialists; A proactive and solution-oriented mindset, with the ability to work independently and collaboratively; Strong organizational skills and the ability to manage multiple priorities within a consulting environment; An interest in contributing to business development, knowledge sharing and the growth of our ICT Risk practice

Nice to have

Previous experience in privacy or data protection consulting, preferably within financial services or another regulated industry; Experience supporting Data Protection Officers (DPOs) or working within privacy, compliance or information security teams; Practical experience conducting Data Protection Impact Assessments (DPIAs), privacy risk assessments or regulatory gap analyses; Familiarity with information security and risk management frameworks such as ISO 27001, ISO 27701 or NIST; Awareness of relevant European regulations and their interaction with privacy and information security requirements, including DORA and NIS2; Experience developing and delivering privacy training, awareness programs or internal compliance guidelines; Privacy-related certifications such as CIPP/E, CIPM, CIPT or equivalent qualifications; Experience contributing to consulting proposals, client presentations and the development of new services

Benefits

A work culture focused on innovation and creating lasting value for clients; Ongoing learning opportunities to help you acquire new skills or broaden and deepen existing expertise; Capco Schools and leadership development programs; A flat, non-hierarchical structure that enables you to work directly with senior partners and clients; Potential opportunities to work across different domains and international locations; An environment where professional development, personal well-being and work-life balance are valued; A diverse, inclusive, meritocratic and international culture; A competitive salary package including a company car or mobility budget, meal and eco-vouchers, home office allowance, insurances, bonus and hybrid working; Phone; Flexible working arrangements