IT Security Officer / Information Security Officer (TÜV)
experts in Germany, matched in minutes from 15,000 CVs with the power of AI.For IT risk reviews, security policies, awareness work, incident handling, and control of technical and organizational safeguards. Find vetted freelancers with the TÜV certificate fast and precisely, ready for on-site or remote work in Germany.
Meet FRATCH IT Security Officer / Information Security Officer in Germany
Geoffrey G.
Last position:
Lead Researcher at York St John Business School
- Independently designed, conducted and evaluated a research project examining dynamic management capabilities (DMCs) in the implementation of HR practices at different management levels (top, middle and frontline management).
- Focus on the strategic role of frontline management in implementing effective HRM measures.
- Self-initiated project with academic collaboration involving York St John University, Robert Kennedy College and the University of Cambridge.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Peter D.
Last position:
Security Consultant at Public-law institution of the city administration
- Requirements management, process planning, interface function, ISMS setup, and documentation
- Setup and establishment of an ISMS according to ISO 27001 and establishment of emergency management / ITSCM
- Coordination of the circumstances with the public-sector IT service provider
- Consideration of KRITIS relevance within the scope and implementation of a B3S
- Development of requirements for document control and the continuous improvement process
- Preparation of relevant project documents
- Analysis of existing processes and preparation of guidelines
- Requirements gathering for ISMS and ITSCM and coordination with the IT service provider, including definition of interfaces
- Analysis of communication processes and escalation paths
- Review of documents for risk management, ISMS, emergency preparedness, and emergency response
- Redesign of the complete documentation and preparation of new relevant documents
- Development of necessary rules, policies, and concepts
- Interface between customer and service provider to ensure document quality
- Coordination of protection needs with specialist departments, particularly regarding KRITIS relevance, and planning of resulting measures
- Development of preventive measures to minimize the risk of data center outages in scenarios such as pandemics or ransomware attacks
- Definition of the test strategy for IT emergency exercises
- Initiation of necessary awareness training measures for specialist departments
- External Information Security Officer
- Introduction of document control
Regina K.
Last position:
Data Protection Consultant at Promotional institute of a federal state (public credit institution)
Industry: Finance/Insurance
- Sparring partner for the data protection team
- Taking over tasks from the data protection backlog
- Updating data protection processes
- Updating TOMs
- Revising template documents (including DPA, data protection guidelines)
- Conducting audits (authorization concept, software development)
- Taking over tasks from day-to-day operations
- Processing data protection reports
- Conducting DPIA and TIA
- Reviewing data processing agreements
- Designing and delivering trainings
- Standard Data Protection Model
- AI and data protection
Result: Successfully supported the data protection team, worked through the data protection backlog, and delivered trainings successfully
Dustin D.
Last position:
External consultant at Deutsche Leasing
2nd LoD/Change the Bank (CtB)
- CtB: External consultant and workstream lead for rectifying findings by BaFin following a special IT audit in the 2nd LoD, management of the work package for revising the ICT Risk Management & ICT Asset Classification in accordance with DORA Chapter 2, the processes for structural analysis, protection requirements, and control assessments (4 FTEs).
Alicja W.
Last position:
Integrated security and emergency documentation for a 24/7 logistics company at Mid-sized logistics company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, Vulnerability Management Policy, Business Resilience Programme, Risk Governance Plan
- Consolidation into an integrated emergency manual (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table and a formal approval structure
- Review and documentation of the applicability of NIS2 and HinSchG, including the legal reasoning for non-applicability
- Processing of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with a documented compensating control
Rüdiger V.
Last position:
Security Consultant at Dataport AÖR
Senior Security Consultant in the PHOENIX project
- Creation of security documentation according to BSI IT Baseline Protection
- Conducting BSI IT Baseline Protection checks in several languages
- Creation and maintenance of milestone plans, work packages, project plans, and project documentation
- Structural analyses, determination of protection needs, modeling, baseline protection checks, risk analyses, HiScout tool
- Consulting on information security and data protection
- Review of operating concepts
Florian K.
Last position:
LAN Planner at Global Network AG
- As-is assessment of the current network infrastructure and its documentation, including on-site inspections
- Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
- Planning of new copper and fiber optic cabling, including patch panels
- Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
- Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
- Additional support after the components go live (hypercare phase)
- Regular communication with project management and client stakeholders
Tarek E.
Last position:
Associate GRC at Egerer Consulting
Carve-out project: Creation of certification strategy, implementation and requirements plans across several standards — ISO/IEC 27001, ISO 9001, ISO 14001, ISO 22301, ISO/IEC 20000-1, BSI IT-Grundschutz and BSI TR- RESISCAN
- Cross-standard assessment of the current state and risk evaluation
- Coordination with stakeholders across departments: ISB, management, certification bodies, legal and data protection
- Consulting in the areas of information security, GRC and IT auditing
Alexander N.
Last position:
Lead AI Transformation at Foxy Ventures GmbH (Holding)
Designed and implemented a GDPR-compliant hybrid organization at holding level, in which specialized AI agents and automated workflows work together with employees. Implementation as part of the MBAI® (Masterclass Business with AI, Leaders of AI) training across the Executive Office, Business Development, Marketing, Sales and HR functions. The next step is the transition into standard operations across all operating companies.
- Analyzed business processes for each function and prioritized AI use cases through a structured use-case process
- Designed an agent architecture based on the principle “one agent, one clearly defined task”: specialized assistants for each function, coordinated by an AI team lead
- Built AI assistants and agents with Microsoft Copilot (prompts, agents, workflows, automations) for the Executive Office, Business Development, Marketing and Sales, and integrated them into existing Microsoft 365 processes
- Implemented recurring activities as automated workflows with clearly defined handover points between people and agents
- Defined GDPR-compliant safeguards: data classification, processing of personal and customer data exclusively on EU-hosted systems, and human approval and control points
- Developed an internal AI policy and governance rules for the use of AI, responsibilities and quality assurance of AI results in line with TISAX
- Prepared the rollout of the hybrid organization from the holding company into standard operations across all operating companies
- Transferred findings into a reusable assessment and consulting framework for introducing AI agent structures for clients
Tech / Methods: Agentic Workflows, Prompt Engineering, Microsoft 365 / Copilot, Claude, ChatGPT, Workflow Automation, GDPR, AI Governance, Change Management
Frank M.
Last position:
Klinikum Stuttgart
- Preparation of a DPIA for the implementation of Windows 11 and Co-Pilots
Daniel J.
Last position:
Information Security Consultant
NIS2 Implementation Project and ISMS Development Based on IT-Grundschutz
Municipal utilities, public-law institution
- Analysis of the current compliance status regarding the requirements of the NIS Directive (NIS-2, EU 2022/2555).
- Identification of critical infrastructures and processes within the organization.
- Development of an action plan to meet NIS requirements.
- Conducting a risk analysis in accordance with BSI Standard 200-3 as the basis for the security concept.
- Preparation of an individual security concept including technical and organizational measures according to BSI IT-Grundschutz.
- Preparatory support for an optional certification according to BSI IT-Grundschutz.
- Adaptation of existing security policies and development of new ones for access controls, incident management and data protection.
- Consideration of municipality-specific requirements and integration of the measures into the existing IT infrastructure.
- Documentation of the results and preparation of audit-ready evidence for audits.
Tools, languages and frameworks used: MS Office, Verinice, IT-Grundschutz (200-x), NIS-2 (EU 2022/2555), ISMS, AI-Act (EU 2024/1989)
Markus M.
Last position:
Project Manager: Engineering Excellence at EnBW Energie Baden-Württemberg
- Evaluation and further development of Engineering Excellence initiatives as part of the “Digital First” program
- Validation of efficiency, productivity, and cost-saving potential in the Software Development Lifecycle (SDLC)
- Organization-wide analysis of the use of Generative AI in the Software Development Lifecycle (SDLC)
- Evaluation of optimization measures in the areas of product management, delivery, developer experience, metrics, and quality assurance
- Alignment of the “Next Level Architecture (NLA)” target vision with regard to organizational design, governance model, and scalability
- Identification of structural bottlenecks in the delivery organization and development of alternative optimization approaches
- Preparation of decision-making and management documents for department management and the Executive Board to evaluate efficiency potential and transformation measures
Skillset: Engineering Excellence, Operating Model Design, Generative AI, AI in SDLC, SAFe, DevOps, Software Delivery Metrics, Value Streams, Team Topologies, Domain Driven Design, Azure DevOps, Jira, Confluence, Management Reporting, Business Case Assessment
Vladimir M.
Last position:
IT & Cybersecurity Project Manager at Technology company / IT security solutions
- Planning, managing and implementing IT security projects with a focus on Palo Alto solutions (e.g. next-generation firewalls, Prisma Access, Cortex, SASE, Zero Trust)
- Coordinating interdisciplinary teams and resources across all project phases
- Managing project scope, schedule, budget and quality in line with customer objectives
- Active stakeholder management and ensuring transparency and communication
- Risk management: identifying, assessing and managing project-related risks
- Creating and maintaining project plans, budget overviews and reports
- Ensuring customer satisfaction through high-quality project and relationship management
- Applying established project management methods such as PMI, PRINCE2 or SCRUM for structured project implementation
Hüseyin O.
Last position:
Interim Head of Project and Delivery Management at ELV Elektronik AG
- Development of a Target Operating Model for integrated hardware, firmware and software delivery.
- Establishment of a PDMO governance model with clear roles, responsibilities and decision rights.
- Improvement of portfolio and delivery transparency for senior management and executive management.
- Integration of a stage-gate product development process with agile software delivery.
- Redesign of release, quality, change and prioritization processes.
- Development of a scalable tooling and reporting architecture for Jira and PPM systems.
Discover over 15,000 top freelancers
IT Security Officer / Information Security Officer statistics
Aggregated from the professional profiles of matched freelancers.
Experience
23 years
Position duration
2.7 years
Positions per freelancer
14
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Professional Services, Banking and Finance
Certification focus areas
Information Technology, Audit, Quality Assurance
Bachelor's degree or higher
90%
Master's degree or higher
66%
Doctorate
12%
Certifications per freelancer
8
Most common languages
German, English, French
Speak two or more languages
96%
Based on our profile pool as of 27 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts holding this certification in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates for IT Security Officer / Information Security Officer in Germany
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 27 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
IT Security Officer / Information Security Officer experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (85%)
- Professional Services (64%)
- Banking and Finance (56%)
- Manufacturing (47%)
- Government and Administration (44%)
- Insurance (40%)
- Healthcare (38%)
- Automotive (35%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the certification
What it covers
The TÜV certificate for an IT Security Officer, also known as an Information Security Officer, shows that a professional can help protect company data, systems, and processes. It is relevant for people who turn security rules into daily practice and who work with management, IT, and business teams.
Core skills
- Building and maintaining security policies and procedures
- Identifying risks and documenting safeguards
- Supporting incident response and follow-up actions
- Raising security awareness across teams
- Working with technical, organizational, and legal requirements
Typical profiles
Holders often come from IT operations, system administration, governance, risk, compliance, or internal audit. Many support security programs alongside other responsibilities, while some focus fully on information security management. In Germany, companies often look for this profile when they need practical support that bridges policy and implementation.
Where it matters
This certification fits projects where security needs structure and clear ownership. Typical work includes introducing or improving an information security management system, preparing for audits, handling supplier security questions, or strengthening incident processes. It is especially useful in regulated sectors, larger IT environments, and companies that want a reliable security contact who can work with technical teams and management.
What it tells a company
A freelancer with this TÜV certification is expected to understand common security threats, basic controls, and how to organize security work without slowing the business down. It signals a structured approach, clear communication, and the ability to translate requirements into practical steps. For companies in Germany, it also suggests a professional who can work in German-speaking environments and handle both remote coordination and on-site cooperation when needed.
Related terms
Searchers may look for the role under IT-Sicherheitsbeauftragter, Information Security Officer, or IT security officer. These names usually point to the same practical need: someone who can support information security governance, awareness, and day-to-day control. When comparing freelancers, look for proof of real project work in addition to the TÜV certificate.
Frequently asked questions
Before you brief your next project: the most common questions about IT Security Officer / Information Security Officer.
The IT Security Officer / Information Security Officer (TÜV) certificate shows that a professional understands how to organize and support information security in a company. It focuses on practical security governance, risk handling, awareness, and coordination with IT and management.
In Germany, IT-Sicherheitsbeauftragter is a common search term for this role, and it often refers to the same kind of security responsibility. The exact wording can vary by provider, but the core topic is the same: managing and supporting information security in practice.
The Information Security Officer profile fits people who take responsibility for security processes, policies, and controls. It is a strong match for IT administrators, security coordinators, compliance staff, and consultants who need to connect technical and organizational security work.
A TÜV-certified IT Security Officer typically helps define security rules, assess risks, support incident handling, and keep security measures aligned with business needs. In projects, this often means working on security concepts, awareness programs, supplier questions, and preparation for audits or reviews.
This certificate is usually more focused on practical security coordination than on highly specialized technical or forensic work. Compared with advanced offensive, cryptography, or architecture certifications, IT Security Officer / Information Security Officer is broader and more governance-oriented.
A candidate should be comfortable with basic IT environments, common threats, and the logic of controls, policies, and responsibilities. The TÜV path usually makes the most sense for professionals who already work with security, risk, or compliance and want a recognized qualification for that role.
Yes. Many organizations in Germany use an Information Security Officer both remotely and on site, depending on the project and the need for workshops or stakeholder meetings. German language skills are often helpful because security policies, audits, and internal coordination are frequently handled in German.
Like many professional security qualifications, the value of the IT Security Officer / Information Security Officer certificate depends on staying current with practice, threats, and company requirements. Companies usually look for recent project experience, not just the certificate itself, so continued work in the field matters a lot.
The average hourly rate for freelancers with IT Security Officer / Information Security Officer in Germany is 116 €, which corresponds to a daily rate of about 929 € based on an 8-hour working day.
Of the freelancers with IT Security Officer / Information Security Officer in Germany, 90% hold at least a Bachelor's degree, 66% hold at least a Master's degree, and 12% hold a doctorate.
On average, freelancers with IT Security Officer / Information Security Officer in Germany have 23 years of professional experience, with a single engagement typically lasting around 2.7 years.
The most common languages among freelancers with IT Security Officer / Information Security Officer in Germany are German (100%), English (96%), and French (15%).
The most common industries among freelancers with IT Security Officer / Information Security Officer in Germany are Information Technology (85%), Professional Services (64%), and Banking and Finance (56%).
The most common business areas among freelancers with IT Security Officer / Information Security Officer in Germany are Information Technology (98%), Project Management (85%), and Operations (65%).
FRATCH IT Security Officer / Information Security Officer main locations
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
