Hire proven Informationssicherheitsbeauftragter (ISB) professionals in Germany, matched in minutes from 15,000 CVs with the power of AI.
Bring in specialists who can run information security management, guide risk analysis, and support policies, controls, audits, and incident handling. Get fast, precise matching with vetted freelancers holding the ISB qualification.
About the certification
What the ISB stands for
The Informationssicherheitsbeauftragter, often shortened to ISB, is the person who helps an organization protect its information assets in a structured way. The role is about governance, not just tools. It covers rules, responsibilities, controls, and the day-to-day follow-up that keeps security measures usable.
Core responsibilities
- Build and maintain information security policies and procedures
- Support risk assessment and treatment decisions
- Coordinate security awareness and internal guidance
- Track incidents, findings, and corrective actions
- Prepare inputs for audits, reviews, and management reporting
Typical profile
An ISB is often found in companies that need a clear security lead but do not want to staff a full internal security department. Many come from IT, compliance, quality management, auditing, or data protection backgrounds. In Germany, the role is especially relevant where structured documentation and clear accountability matter across business and technical teams.
Knowledge behind the role
The qualification points to practical knowledge of information security management, threat awareness, internal controls, and organizational discipline. It also involves understanding how people, processes, and systems interact.
- Security policies and governance
- Risk identification and mitigation
- Incident response coordination
- Awareness and training concepts
- Audit support and continuous improvement
What it tells a company
A freelancer with the ISB qualification should be able to bring order to security tasks, not just comment on them. That matters in projects where policy gaps, unclear ownership, or weak follow-up create real risk. For companies in Germany, this profile is useful when security work must fit local expectations, internal German-language documentation, and coordination with management, IT, and compliance.
Where it fits best
The ISB is a strong fit for organizations building or improving an information security management system, preparing for audits, or tightening internal controls after a security incident. It also fits transitions from ad hoc security work to a more formal model with clear roles and reporting lines. Companies often look for ISB freelancers when they need a steady hand for workshops, documentation, rollout, and follow-up.
Meet FRATCH Information Security Officer (ISB)
Florian Schröder
Information Security Officer / IT Security Architect / Awareness Expert
Last position:
Information Security Officer / Designated InfoSec Officer at Oil Company
- Complete overhaul of the ISMS according to ISO 27001
- Conducted a comprehensive gap analysis
- Reduced ISMS documentation by 30% through consolidation and process optimization
- Introduced a full PDCA cycle for continuous improvement
- Established the ISMS within the company
- Implemented the necessary processes
- Managed and conducted internal and external audits
- Developed and implemented a company-wide risk management system
- Deployed an ISMS tool including process design and training
- KRITIS compliance: Prepared and provided required evidence, liaised with regulatory authorities, planned, documented, and implemented an attack detection system (SIEM), co-led the BCMS/ITSCM implementation subproject
- NIS-2 implementation: Gap analysis, risk assessments, training for executives and staff
- Led a cybersecurity team of 3 members
- Conducted various internal and external audits, managed providers, introduced continuous improvement
- Project consulting: closely coordinated with business and system owners, launched an online shop, a mobile app, and a customer portal
- Redesigned the security architecture, reducing administrative efforts by 20%
- Implemented ITIL processes (e.g., change management)
- Revised service agreements with internal and external providers
- Developed a security awareness strategy, ran social engineering tests, introduced and monitored phishing simulations, created various awareness materials, gave presentations
- Managed a budget of one million euros
Tarek El Idrisi
IT-Consultant
Last position:
Associate GRC at Egerer Consulting
Carve-out project: Development of certification strategy, implementation and requirement plans across multiple standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz, and BSI TR-RESISCAN
- Cross-standard inventory and risk assessment
- Coordination with cross-department stakeholders: ISB, executive management, certification bodies, legal and data protection
- Consulting in information security, GRC, and IT auditing
Swen Bartetzky
Founder and CEO
Last position:
Founder and CEO at Swen Bartetzky Consulting
Based on previous experience in these fields, we match jobs in data and information security, compliance, quality management, and process optimization with the right candidates and freelancers, or do the work ourselves if needed.
Marco Trautmann
Chief Financial Officer & ExCo Member
Last position:
Chief Financial Officer & ExCo Member at Senacor Technologies AG
- Led assessment and preparation for finance and business management transformation including roll-out of SAP S/4 HANA Cloud, Public Edition.
- Enhanced financial and project reporting by streamlining tools and introducing a management dashboard.
- Introduced opportunity management reporting as part of business operations activities.
- Prepared annual financial statements (HGB).
- Directed annual budget development and aligned it with the ExCo.
Ekrem Tunclar
Trainee Auditor ISO27001
Last position:
Trainee Auditor ISO27001 at GUT Certifizierungsgesellschaft für Managementsysteme mbH
- Clients: SMEs and public organizations
Maxim Anikeev
External Lecturer (Privatdozent)
Last position:
External Lecturer (Privatdozent) at Technische Universität Darmstadt
Supervised the course Software Engineering for Bachelor students and delivered lectures.
Benno Zabel
Freelance Data Protection Officer
Last position:
Freelance Data Protection Officer at SUMTEC
- Drafting the data protection concept under EU GDPR including DPIA and implementing TOMs
Jörg Hoffmann
Managing Director; Data Protection Officer; Information Security Officer
Last position:
Managing Director; Data Protection Officer; Information Security Officer at Datenschutz24 (brand of Sovestro GmbH)
- Drafting company agreements related to data protection
- Acting as a mediator between business interests and data subject rights in a corporate context
- Process analysis and evaluation regarding data protection and information security implications according to GDPR, BDSG, BSI baseline protection
- Support for information security audits according to ISO 27001
- Implementation of change management processes
- Analysis of IT infrastructure and deriving recommendations
- Expert support in legal proceedings and communication with supervisory authorities
- Preparation of data protection impact assessments (DPIAs) and procedure and processing documentation (VVZ)
- Training on corporate data protection and information security
- Cooperation with law firms in legal proceedings
Lucas Löcken
Consultant in Information Security, Data Protection and Business Continuity Management
Last position:
Consultant in Information Security, Data Protection and Business Continuity Management
Consulting and support in gathering information security requirements (IT-SIG 2.0, KRITIS, TISAX, industry standards, ISO 27001, A-960/1)
Acting as data protection officer and auditor as well as information security auditor
Conducting employee training
Updating risk analyses with risk treatment
Designing information security concepts based on BSI IT Baseline Protection, KRITIS, ISO 27001, A-960/1 and TISAX
Identifying information security requirements for IT systems (WAN, LAN, clouds) and overseeing implementation
Administering the ISMS using Verinice and SAVe
Integrating security concepts into existing management systems according to ISO 9001 and ISO 27001
Process management and modeling according to ITIL
Management consulting for integrating an ISMS into integrated management systems
Advising on data protection (GDPR, BDSG)
Planning and conducting data protection audits
Designing risk management processes and methodologies according to ISO 27005, ISO 31000 and BSI 200-3
Developing and setting up training programs for employees
Sven Thiele
IT Security Consultant – Creation & Management of the IT Security Roadmap
Last position:
IT Security Consultant – Creation & Management of the IT Security Roadmap at Diehl Aviation
- Analyze and structure specific IT security requirements
- Build a structured requirements backlog as a basis for the sub-group’s IT security initiatives (including separation from group-wide programs)
- Conduct a systematic delta comparison with group-wide IT security requirements to identify open needs and dependencies
- Develop a multi-level IT security roadmap including implementation and project planning, aligned with internal and external stakeholders
- Provide professional project management at the program level, including status analysis, risk management, action tracking, and goal control
- Coordinate internal departments and external service providers, including communication planning and managing regular status meetings
Hans-Peter Ramatschi
Interim Director Project Management
Last position:
Interim Director Project Management at Heater and air conditioning equipment manufacturer (non-automotive)
- Improved status and performance of the project management department
- Project management "Project Management Excellence"
- Operational coaching in crisis projects
- Root cause analysis
- Developing and implementing improvement measures
- Reporting to Head of R&D
Friederike Balaz
Information Security Manager
Last position:
Information Security Manager at Johner Medical GmbH
Burkhard Hinz
Consultant for Data Protection, AI, Compliance and Organizational Development
Last position:
Consultant for Data Protection, AI, Compliance and Organizational Development
- Set up automated processes in data protection management (e.g. ROPA, PIA, DPIA)
- Complete overhaul of data subject rights processes (erasure, access, etc.)
- Development of a data and AI compliance management system
- Support in setting up a data governance framework
- Establishment and support of agile project management
- Support in the strategic realignment of the privacy department
Discover over 15,000 top freelancers
Information Security Officer (ISB) statistics
Typical experience
22 years
Average project duration
3.1 years
Certifications per freelancer
6
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Professional Services, Manufacturing
Most common languages
German, English, Spanish
Bachelor's degree or higher
100%
Master's degree or higher
60%
Doctorate
20%
Salary / Daily Rate Distribution
The chart shows how the daily rates of freelancers holding this certification are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Average rates for Information Security Officer (ISB) & Seniority distribution
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Frequently Asked Questions
Do you have questions? Here you can find further information about FRATCH
An Informationssicherheitsbeauftragter (ISB) qualification validates that the person can organize information security in a company setting. It focuses on policy work, risk thinking, awareness, incident follow-up, and coordination between business and IT. It is more about structure and governance than about operating technical security tools.
The ISB is broader and more organizational than most hands-on technical certifications. A freelancer with this background is expected to help define rules, responsibilities, and controls, then keep them working in practice. Technical specialists may still be needed for firewalls, testing, or system hardening, but the ISB connects those efforts to business needs.
It is a good fit for people who take responsibility for information security coordination, especially in small and mid-sized organizations. Many holders come from IT, compliance, risk, quality, or audit functions and move into a formal security role. It also suits freelancers who advise clients on security management and documentable controls.
An ISB is useful in projects that set up or improve an information security management system, prepare for an audit, or close gaps after an incident. The profile also helps when a company needs security policies, awareness sessions, or clear internal ownership. It is especially valuable when different departments need one person to keep the work aligned.
A strong candidate should understand how organizations work, how risks are judged, and how policies become daily practice. Prior experience in IT operations, governance, compliance, or auditing is helpful, because the role depends on coordination and follow-through. Good communication is just as important as subject knowledge.
The role needs both, but the balance is usually on process and organization. An Informationssicherheitsbeauftragter must understand technical risks well enough to talk to specialists and make sound decisions, yet the main task is to manage security in a structured way. That includes policies, responsibilities, evidence, and escalation paths.
In Germany, companies often expect clear documentation, defined responsibilities, and careful coordination across teams. An ISB can help meet those expectations in a practical way, especially when security work needs to be explained to management in plain terms. For freelance work, German-language communication and familiarity with local business structures are often valuable.
Many employers expect an ISB to keep learning, because information security changes quickly. Even when there is no formal renewal step, ongoing education is important to stay current on threats, methods, and organizational expectations. A freelancer with recent practice usually brings more value than someone whose knowledge is outdated.
Request a Free Demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
