BSI IT-Grundschutz-Praktiker
professionals in Germany, matched in minutes from 15,000 CVs with the power of AIFind freelancers who can apply IT-Grundschutz in real projects: basic protection checks, risk-oriented safeguards, documentation, and support for secure operations. Get fast, precise matching with vetted professionals who hold the BSI IT-Grundschutz-Praktiker certificate.
Meet FRATCH BSI IT-Grundschutz-Praktiker in Germany
Matthias K.
Last position:
Business Owner at AKM
Management of several MFA methods for centralized authentication within a group. Interface between various stakeholders such as Support, Finance, Developers, and Security departments. Assessment of compliance requirements such as KRITIS. Budget controlling and monitoring of KPIs and SLAs. Support with internal and external audits on MFA topics and with connecting new systems. Review of operational documentation. Participation in steering committees and leadership of service review meetings and decision-making committees.
Tools/Frameworks: FIDO, Yubikey, Veridium, BSI Grundschutz, NIST
Peter D.
Last position:
Security Consultant at Public-law institution of the city administration
- Requirements management, process planning, interface function, ISMS setup, and documentation
- Setup and establishment of an ISMS according to ISO 27001 and establishment of emergency management / ITSCM
- Coordination of the circumstances with the public-sector IT service provider
- Consideration of KRITIS relevance within the scope and implementation of a B3S
- Development of requirements for document control and the continuous improvement process
- Preparation of relevant project documents
- Analysis of existing processes and preparation of guidelines
- Requirements gathering for ISMS and ITSCM and coordination with the IT service provider, including definition of interfaces
- Analysis of communication processes and escalation paths
- Review of documents for risk management, ISMS, emergency preparedness, and emergency response
- Redesign of the complete documentation and preparation of new relevant documents
- Development of necessary rules, policies, and concepts
- Interface between customer and service provider to ensure document quality
- Coordination of protection needs with specialist departments, particularly regarding KRITIS relevance, and planning of resulting measures
- Development of preventive measures to minimize the risk of data center outages in scenarios such as pandemics or ransomware attacks
- Definition of the test strategy for IT emergency exercises
- Initiation of necessary awareness training measures for specialist departments
- External Information Security Officer
- Introduction of document control
Jens B.
Last position:
Senior Cyber Security Consultant at Brennscheidt IT Consulting
KEY PROJECTS
Since 05/2023 | Bank | Senior Cyber Security Consultant (external)
- Advising and guiding the system owners in creating and further developing IT security concepts
- Coordinating and tracking the remediation of findings from reviews and audits
- Advising on the implementation of regulatory requirements for information security
10/2023 – 02/2024 | Fintech | Project Manager (external)
- Project management to close various audit gaps in the field of information security
- Conceptual design and implementation of an information security management system based on ISO/IEC 27001
- Creation and further development of ISMS documents and processes
M. S.
Last position:
Security Consulting, Audits & Expert Opinions
- Innovation/pilot project eGesundheit Deutschland
- SaaS company in the media sector, NRW
- Secure software development lifecycle, NRW
- BSI IT-Grundschutz expert opinions for several clinics
Florian K.
Last position:
LAN Planner at Global Network AG
- As-is assessment of the current network infrastructure and its documentation, including on-site inspections
- Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
- Planning of new copper and fiber optic cabling, including patch panels
- Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
- Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
- Additional support after the components go live (hypercare phase)
- Regular communication with project management and client stakeholders
Tarek E.
Last position:
Associate GRC at Egerer Consulting
Carve-out project: Creation of certification strategy, implementation and requirements plans across several standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz and BSI TR- RESISCAN
- Cross-standard assessment of the current state and risk evaluation
- Coordination with stakeholders across departments: ISB, management, certification bodies, legal and data protection
- Consulting in the areas of information security, GRC and IT auditing
Kerstin S.
Last position:
Project management at IT service provider in the SAP area for energy companies
- Project management for the SAP release upgrade of a large multi-client environment (IT service provider in the SAP area for energy companies)
- Setting up a release process for future operational workflows
- Cutover planning
- Building a test management process with the involved clients
Frank M.
Last position:
Klinikum Stuttgart
- Preparation of a DPIA for the implementation of Windows 11 and Co-Pilots
Daniel J.
Last position:
Information Security Consultant
NIS2 Implementation Project and ISMS Development Based on IT-Grundschutz
Municipal utilities, public-law institution
- Analysis of the current compliance status regarding the requirements of the NIS Directive (NIS-2, EU 2022/2555).
- Identification of critical infrastructures and processes within the organization.
- Development of an action plan to meet NIS requirements.
- Conducting a risk analysis in accordance with BSI Standard 200-3 as the basis for the security concept.
- Preparation of an individual security concept including technical and organizational measures according to BSI IT-Grundschutz.
- Preparatory support for an optional certification according to BSI IT-Grundschutz.
- Adaptation of existing security policies and development of new ones for access controls, incident management and data protection.
- Consideration of municipality-specific requirements and integration of the measures into the existing IT infrastructure.
- Documentation of the results and preparation of audit-ready evidence for audits.
Tools, languages and frameworks used: MS Office, Verinice, IT-Grundschutz (200-x), NIS-2 (EU 2022/2555), ISMS, AI-Act (EU 2024/1989)
Steffen L.
Last position:
Consultant for BSI baseline protection and ISO 27701 at Society for International Cooperation
- Support in building and further developing the information security management system
- Cooperation with external consultants in the certification team for the support structure
- Involvement in project planning, identification, and implementation of the necessary measures according to BSI IT baseline protection
- Professional support for in-house subject matter experts in creating the documents required for certifications
- Carrying out the work according to BSI 200-2
Volker K.
Last position:
Head of Application Management at Bundeswehr FuhrparkServices GmbH
- Led 34 specialists in application management and software engineering
- Developed and ran fleet management for 45,000 vehicles for the German Armed Forces using SAP R/3 and SAP S/4 Hana modules
- Provided and enhanced software for rental and leasing business as well as mapping all company processes of BwFPS, including mobile apps
- Supported the electrification of the Bundeswehr vehicle fleet
- Developed and operated cloud-based custom solutions
- Responsible for the security architecture of the entire IT landscape, following the IT security requirements of the Bundeswehr, BSI IT-Grundschutz, and critical infrastructures
- Secured terrestrial communication networks, mobile networks, IT middleware, and applications against cyberattacks
- Migrated the fleet management system to SAP S/4 Hana, achieving efficiency gains
- Developed a complexity index for the IT landscape and reduced it through retirement, modernization, and interface removal
- Used AI models to support procurement processes, knowledge management, and process simplification
Daniel K.
Last position:
Technical Project Manager & Interim Manager at Remmert GmbH
- Project volume in €: ~15 million
- Number of employees: 8
- Managing strategic projects & leading procurement
- Outsourcing standard products abroad
- Process optimization in quality management
- Interim manager for purchasing & procurement
- Planning and implementation of optimization measures
- Material flow in production
- Warehouse management
- Process automation
Michael F.
Last position:
Project Manager Implementation B3S / ISO 27001 at Health Insurance Fund
- Coordination of the B3S and ISO 27001 implementation project, considering the upcoming KRITIS evidence procedure
- Providing consulting services in ISO 27001, B3S, KRITIS, and IT baseline protection
- Collaborating with the Information Security Officer (ISO)
- Identifying company assets for IT risk management
- Developing a zone concept for IT risk management
- Creating an action plan for B3S
- Developing a template for risk analyses
Wolfgang S.
Last position:
CIO / CDO / Project Manager AI Academy / Auditor of Operational Processes / Product Owner MS365 at F&P Executive Solutions AG
- Digitalization of accounting, signature/approval, and onboarding processes
- Restructuring of the IT department
- Introduction of a digital sales tool
- Implementation of an AI webinar series
- Introduction and optimization of information security
- Administration and optimization of the MS Office 365 environment
Andreas I.
Last position:
Cybersecurity Specialist Assessor at Bundesnetzagentur
- Recognition of national notified bodies
- Preparation of cybersecurity competency reports
- EU Radio Equipment Directive
Discover over 15,000 top freelancers
BSI IT-Grundschutz-Praktiker statistics
Aggregated from the professional profiles of matched freelancers.
Experience
22 years
Position duration
2.6 years
Positions per freelancer
15
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Information Technology, Professional Services, Government and Administration
Certification focus areas
Information Technology, Quality Assurance, Audit
Bachelor's degree or higher
81%
Master's degree or higher
52%
Doctorate
15%
Certifications per freelancer
11
Most common languages
German, English, French
Speak two or more languages
95%
Based on our profile pool as of 26 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts holding this certification in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates for BSI IT-Grundschutz-Praktiker in Germany
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 26 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
BSI IT-Grundschutz-Praktiker experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (95%)
- Professional Services (80%)
- Government and Administration (50%)
- Banking and Finance (45%)
- Telecommunication (43%)
- Manufacturing (40%)
- Automotive (30%)
- Education (30%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the certification
What it validates
The BSI IT-Grundschutz-Praktiker certificate shows that a person understands the basics of the IT-Grundschutz method from the Federal Office for Information Security. It is aimed at practical work, not abstract theory. A certified professional can support the first steps of a security program, help structure a protection concept, and work with teams that need a clear, German security baseline.
Core skills
- Understanding the logic of IT-Grundschutz and how it is used in daily security work
- Identifying typical assets, threats, and protection needs in an organization
- Supporting basic safeguards and documenting security-relevant measures
- Working with security officers, administrators, and auditors on a shared method
- Translating the BSI approach into practical tasks for systems and processes
Typical profiles
People with the IT-Grundschutz-Praktiker, often written as Grundschutz-Praktiker, usually work close to infrastructure, governance, or compliance. They may be IT security coordinators, system administrators, consultants, internal auditors, or project staff who need a solid grasp of the BSI method. In Germany, this certificate is especially useful where teams want a common language for security work and clear documentation.
What companies get
A freelancer with this certificate can help organizations start or strengthen a structured security baseline. They are useful when a team needs support with asset views, safeguard selection, gap checks, or preparation for deeper security work. The certificate does not replace senior security expertise, but it tells you the person can work in a disciplined way with the IT-Grundschutz method and fit into projects where consistency matters.
Knowledge areas
A qualified professional usually understands the practical ideas behind:
- BSI IT-Grundschutz modules and their purpose
- Basic protection and how it differs from higher assurance work
- Documentation, evidence, and repeatable security processes
- Cooperation between security, operations, and management
- The role of IT-Grundschutz in audits, internal controls, and secure project delivery
Where it matters
This certificate matters most in public sector work, regulated environments, and organizations in Germany that follow BSI-oriented security practices. It is also relevant in projects that need structured rollout of security requirements, preparation for audits, or clean documentation for existing controls. When you hire for this profile, you get someone who can contribute to methodical security work without needing a long ramp-up on the BSI approach.
Frequently asked questions
Key details about BSI IT-Grundschutz-Praktiker, drawn from the questions we get asked most.
The BSI IT-Grundschutz-Praktiker certificate validates practical knowledge of the BSI IT-Grundschutz method. It shows that the holder can understand basic protection concepts, work with structured security documentation, and support safeguard selection in real projects. It is a hands-on certificate for day-to-day security work, not a high-level design or leadership credential.
The IT-Grundschutz-Praktiker level is about applying the method correctly in practice. More advanced BSI-related roles usually require deeper experience with security management, auditing, or detailed concept work. If you need someone to support implementation and documentation rather than lead a full security program, this level can be a good fit.
The BSI IT-Grundschutz-Praktiker is well suited to people who work close to information security, operations, or compliance. That includes consultants, security coordinators, system administrators, internal control staff, and project members who need a solid understanding of the BSI approach. It is also useful for freelancers who want to support clients using German security standards.
A freelancer with the Grundschutz-Praktiker certificate fits projects that need structured security basics. Typical work includes building or updating a protection concept, mapping assets and safeguards, supporting documentation, and preparing teams for security reviews. It is especially relevant when the client wants a methodical approach based on BSI IT-Grundschutz.
For the BSI IT-Grundschutz-Praktiker, preparation usually means learning the IT-Grundschutz method, the structure of the BSI modules, and the practical use of basic protection in projects. Candidates benefit from real work experience in IT, security, or compliance because the certificate is focused on application. Formal entry requirements are usually handled by the training provider or exam route, so it is worth checking the current path before booking.
The IT-Grundschutz-Praktiker certificate is tied to the BSI training and exam framework, so renewal depends on the current rules of the issuing body and the training path you choose. Professionals should always verify whether their proof of competence is considered current for the role or client they want to support. In practice, companies care less about the label alone and more about whether the person still works confidently with the method.
The BSI IT-Grundschutz-Praktiker is especially relevant in Germany because many organizations use BSI-oriented security concepts and documentation styles. That makes the certificate a useful signal when a client wants a freelancer who understands the local method and can communicate clearly with German-speaking teams. It can also help when on-site collaboration is needed alongside remote work.
A profile with the BSI IT-Grundschutz-Praktiker tells you the person can contribute to structured security work without needing a long introduction to the BSI method. It is a good sign for tasks that require disciplined documentation, basic safeguard thinking, and cooperation with IT and management. For complex security architecture or high-level governance, you may still want to pair that person with a more senior specialist.
The average hourly rate for freelancers with BSI IT-Grundschutz-Praktiker in Germany is 123 €, which corresponds to a daily rate of about 986 € based on an 8-hour working day.
Of the freelancers with BSI IT-Grundschutz-Praktiker in Germany, 81% hold at least a Bachelor's degree, 52% hold at least a Master's degree, and 15% hold a doctorate.
On average, freelancers with BSI IT-Grundschutz-Praktiker in Germany have 22 years of professional experience, with a single engagement typically lasting around 2.6 years.
The most common languages among freelancers with BSI IT-Grundschutz-Praktiker in Germany are German (100%), English (95%), and French (13%).
The most common industries among freelancers with BSI IT-Grundschutz-Praktiker in Germany are Information Technology (95%), Professional Services (80%), and Government and Administration (50%).
The most common business areas among freelancers with BSI IT-Grundschutz-Praktiker in Germany are Information Technology (100%), Project Management (93%), and Quality Assurance (78%).
FRATCH BSI IT-Grundschutz-Praktiker main locations
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
