Data Privacy & Compliance Consultant

The role As a Data Privacy & Compliance Consultant based in Tunis, you will support European clients in building and maintaining robust data protection and digital resilience frameworks.

You will work across regulatory compliance topics — including GDPR, DORA, and ISO, 27001, 27701, ISAE and all regulations implying Data for Financial and Insurance Services sectors — helping clients assess their exposure, design appropriate governance structures, and implement sustainable compliance programs.

Key Responsibilities

• Assess client data protection practices and identify gaps against applicable regulations and standards

• Support the design and implementation of Privacy Information Management Systems (PIMS)

• Conduct Data Protection Impact Assessments (DPIAs) and maintain records of processing activities (RoPA)

• Advise clients on DORA compliance requirements, including ICT risk management, incident reporting, and third-party risk oversight

• Draft and review privacy policies, data processing agreements, and internal governance documentation

• Collaborate with IT and cybersecurity teams to embed privacy-by-design principles into client systems and processes

• Deliver training and awareness sessions to client teams on data protection and compliance best practices

• Support audit preparation and readiness assessments against ISO 27701 and related frameworks for Moonside

• Work closely with project managers and cross-functional teams to ensure timely and quality delivery

Requirements

• Master's degree in Information Systems, Cybersecurity, or related fields

• 4 to 7 years of experience in a data privacy, GRC, or cybersecurity compliance role

• Solid knowledge of GDPR and practical experience in data protection program implementation

• Familiarity with DORA (Digital Operational Resilience Act) requirements

• Understanding of ISO 27001 / ISO 27701 frameworks

• Strong analytical, documentation, and communication skills

• Structured, detail-oriented, and able to manage multiple workstreams

• Fluent in French and English (written and spoken)

Nice to have:

• ISO 27701 Lead Implementer certification

• ISO 27001 Lead Implementer or Lead Auditor certification

• Experience in a consulting or professional services environment

• Exposure to European clients or cross-border projects