Privacy Champion

About the role

As a Privacy Champion you will be the GDPR and privacy subject‑matter expert within the Central Data Governance Office, working closely with the SNCB Legal Digital & Data team and the Data Protection Officer.

Key responsibilities

• Maintain and improve privacy governance processes, controls and documentation.
• Support implementation and adoption of SNCB privacy policies, standards and guidelines within Ypto.
• Translate enterprise privacy requirements into practical actions and guidance for local stakeholders.
• Assist stakeholders with Records of Processing Activities, processor registers, privacy assessments and breach documentation.
• Advise on DPIAs, DTIAs, privacy risks, compliance obligations and privacy‑by‑design practices.
• Represent Ypto in the NMBS/SNCB Privacy Champion network and Privacy Committee.
• Contribute to privacy awareness, training, reporting, audits and compliance reviews.
• Support privacy requirements in projects, operations and third‑party processor assessments.

Required profile

• Master’s degree or equivalent with 3‑5 years of experience in IT, cybersecurity, risk management, compliance or governance and 3‑5 years in privacy/GDPR.
• Professional proficiency in English, Dutch and French.
• Strong analytical, communication and stakeholder‑engagement skills.
• Commitment to continuous development through training, certifications and professional communities.

Required skills

• Strong knowledge of GDPR and Belgian privacy legislation.
• Knowledge of AI governance frameworks, Responsible AI principles and the EU AI Act.
• Experience with privacy governance, compliance and risk‑management frameworks.
• Understanding of cybersecurity, information‑security and privacy standards.
• Experience performing or reviewing DPIAs and privacy risk assessments.
• Ability to translate regulatory requirements into practical business solutions.
• Relevant certifications such as CIPP/E, CIPM, CIPT, AIGP, ISO 27001‑related or recognized DPO certification.

What we offer

• Hybrid working with a balanced mix of office and remote work and flexible hours.
• 35 days of annual leave.
• Mobility package with a company car or alternative mobility options and a public‑transport season ticket.
• Target bonus and comprehensive insurance package covering hospitalisation, dental care and outpatient costs for the whole family.
• Group insurance, supplementary pension (cafeteria plan), meal vouchers, eco‑vouchers and allowances for hybrid working and internet.