Data Protection Consultant

Since late last year, CTG has officially become part of Cegeka, an international IT services provider, further expanding our expertise and innovative strength in North America and Europe. Together, we provide leading digital transformation solutions for various sectors worldwide.   We are currently looking for experienced/senior Risk & Compliance Consultants for various projects in the Life Sciences sector. In order to guarantee patient safety, numerous regulations apply within Life Sciences. As a Risk & Compliance Consultant, you will help ensure that this patient safety and quality are monitored. Our consultants usually work on compliance projects within IT, but are equally well deployed in other departments and/or in an operational role. The combination of scientific knowledge and interest/experience in IT and automation within the Life Sciences sector is the unique character of our consultants and unit.

• As an experienced Data Protection Consultant, you will be responsible for planning, coordinating, implementing and reporting on data privacy and/or information security compliance projects.
• You face complex issues and approach them in a creative solution-oriented manner.
• You perform compliance activities and create related deliverables. You provide guidance and support on compliance with relevant regulations, advise on risk-based compliance strategies and implement improvements and solutions to specific problems from a legal, IT and information security standpoint.
• You perform assessments, gap and risk analyses at client sites and are adept at creating improvement plans.
• You actively follow up evolutions within the Data Privacy domain and participate in knowledge exchanges within the unit. For junior colleagues, you take on the role of mentor and coach.

• You have a Master's degree and at least 3 years of experience in compliance within data protection and management and/or information security.
• You have a good understanding of the applicable laws, regulations, standards and guidelines (GDPR, NIS, ...). Additionally, you have knowledge of ISO standards around information security (27001, 27002, 27005) and other relevant standards (COBIT).
• Knowledge of or experience with relevant tooling such as CIPP/E, CIPM, CIPT, CISM, CISA, CISSP or others is a plus.
• You have a strong work ethic, keeping your appointments punctually, being flexible (over taking CSV) and being pragmatic and precise in your approach. Quality is an absolute priority for you.