Open position: Compliance officer

About you 

• You hold a Master’s degree, preferably in (IT) law, business administration, information security or you have equivalent experience.
• You have at least five years of relevant experience, preferably in a technological or regulated environment.
• You have experience in policy development, document management and risk management.
• You have an in-depth knowledge of European and Belgian regulations (GDPR, NIS2 , DSA, CER, CSA, etc.) and of information security standards such as ISO27001 and Cyberfundamentals.
• You are familiar with compliance processes.
• You have strong communication skills, are able to explain complex regulations clearly and enjoy building bridges between policy and practice.
• You speak and write Dutch and English fluently.

Your job 

You're a member of the Governance, Risk and Compliance unit and help to fulfil the following responsibilities:

Cybersecurity and information security

• Together with the CISO, you help build a strong organisational culture around cybersecurity and information security.
• You monitor compliance with the information security policy through assessments, audits and risk analyses.
• You contribute to the implementation, monitoring and continuous improvement of the ISMS in accordance with ISO/IEC 27001.
• You document and manage internal security standards, guidelines and procedures and ensure they are correctly applied.

Compliance and legal follow-up

• You proactively follow up relevant legislation and regulations (GDPR, NIS2, DSA, CER, CSA, etc.) and translate them into practical actions.
• You support the drafting and management of policy documents, internal guidelines and codes of conduct.
• You advise on cybersecurity and data protection and support the DPO in terms of compliance with privacy legislation.
• You support broad compliance and administrative obligations, including requests from financial institutions, insurers, auditors, accountants and public authorities.
• You follow the development of relevant international policy rules (such as the ICANN Consensus Policy) and advise colleagues on potential impacts.

Risk management, awareness and supply chain responsibility

• You identify legal, compliance and security risks within the organisation as well as at external suppliers or partners.
• You monitor the quality of risk analyses, security designs and technical solutions with special attention for supply chain risks.
• You ensure that suppliers and IT service providers comply with security requirements and that contractual obligations are correctly met.
• You develop and provide training and awareness sessions on compliance, privacy and information security.
• You coordinate participation in compliance and audit requests from suppliers and other parties DNS Belgium works with.

We offer

A light-filled office near the Vaartkom in Leuven. We're easily accessible by bike, public transport or car.  

More importantly: our office is designed with a view to accessibility and comfort for everyone to ensure every colleague feels welcome and supported.

39 people work at DNS Belgium, divided over four departments: Digital Society, People and Business Services, GRC (Governance, Risk and Compliance) and Technology. Most employees have a hybrid work schedule, which means homeworking is also a possibility for you.  DNS Belgium has a culture of openness, inclusiveness and sustainability. We have a good work-life balance and actively invest in training programmes and personal growth. 

What else can you expect?

• A multi-faceted and challenging role with plenty of autonomy, enabling you to make your mark and benefit from person growth opportunities.
• We have a sustainable workplace and are an employer that invests in your development. We have a generous training budget and provide 12 days of training for you each year.
• An attractive salary with benefits such as group insurance, hospitalisation cover, mobility budget, meal vouchers, 32 days of leave, mobile phone plan and laptop.
• A cafeteria plan with a choice of bicycle leasing, additional paid days of leave, etc.
• A permanent contract.
• The ability to get started quickly.