Senior Compliance Advisor | MiFID MAR MiCAR DORA | Brussels-Luxembourg - Freelance

We are looking for senior regulatory compliance consultants for advisory missions within Belgian and Luxembourg financial institutions — banks, asset managers, private banks, and brokerage firms navigating the current wave of EU regulatory change.

This is not a KYC operations role. This is not remediation. We need consultants whose natural language is MiFID, MAR, MiCAR, and DORA — advisors who work on regulatory strategy, product approval, and inspection preparation.

The regulatory pressure is converging: DORA in force since January 2025 with institutions still closing gaps. MiCAR in full enforcement — all CASPs must be licensed by July 2026. AMLR application in July 2027. Institutions that relied on Big4 for this work are increasingly turning to independent consultants who deliver the same depth, faster, at a more competitive price.

What these missions involve:

— Compliance advisory on capital markets and prudential regulations: MiFID II/MiFIR (investor protection, product governance, inducements, best execution), MAR (market abuse surveillance, insider dealing controls, PDMR obligations), MiCAR (CASP licensing, ART/EMT issuer obligations, white paper requirements), DORA (ICT risk management, third-party oversight, incident reporting), Benchmark Regulation, ECSPR

— Product approval and new business initiative reviews from a regulatory compliance angle

— Interpreting EU regulatory developments (EBA/ESMA/EIOPA guidelines, Level 2 measures, RTS/ITS) and translating them into policies, procedures, and position papers

— Acting as trusted compliance counterpart to business stakeholders — challenging when necessary, without blocking commercial activity by default

— Regulatory watch summaries for senior management, compliance committees, and board reporting

— Inspection preparation: FSMA conduct reviews, BNB prudential assessments, CSSF on-site visits

— DORA-specific where relevant: ICT risk management framework assessment, third-party provider registers, concentration risk, incident classification, digital resilience testing (TLPT)

Mission parameters:
— Duration: 2 to 12 months
— Location: Brussels or Luxembourg, hybrid
— Rate: €750–€1,300/day depending on specialisation and languages
— Start: ASAP — ongoing intake