Andreas R.-Principal Information Security Consultant
Check rate
Experience
Freelance Information Security Consultant
A-R-C Andreas Rühl Consulting
Development and implementation of customized information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI-Grundschutz and other standards
Risk management and preparation of security concepts
Consulting for KRITIS, PCI DSS, TISAX and VdS 3473/10000
Establishment and optimization of security organizations
Creation and implementation of policies, guidelines, work instructions and process descriptions
Audit support and certification preparation
Delivery of training sessions, workshops and awareness campaigns
Selection and consulting for the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration and management of security architectures in complex IT environments
Consulting on ITSM, managed security services and SOC
Management and coordination of complex projects to improve information security
Process analysis, optimization and management according to ITIL, ISO 27001 and cybernetics
Introduction and quality assurance of management, documentation and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organization of initial response, forensic investigations and organizational measures in security incidents
Design and delivery of targeted workshops on topics such as ISMS, IT risks and current threat scenarios
Awareness campaigns to promote a security culture in companies
Special training on ISO 27001, BSI-Grundschutz, KRITIS and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in information security
Establishment and management of security departments, including employee recruitment and qualification
Temporary assumption of management responsibility in critical situations
Head of Security Solutions / Technical Head of Information Security Consulting
Profi Engineering Systems AG
- Co-establishment of the Security Solutions business area
- Working with customer representatives from all functional areas
- Professional leadership of the information security consulting team
- Management of sales and engineering teams from the initial presentation of ideas through contract signing to project completion
- Active involvement in presales
- Finding solutions during escalations
- Proactive communication and responsibility for projects
- Strategic development of topics with direct reporting to management
- Further development and coaching of team members
- Leadership in line with the company culture
- Development and expansion of the consulting offering
- Information security project management and consulting
- ISMS development and audit support
- Consulting on B3S, NIS2, KRITIS, ISO 27001, BSI-Grundschutz, PCI DSS, VdS 3473 and TISAX
- Creation and introduction of policies, work instructions, process descriptions, operational documentation and manuals
- ITSM and process consulting
- Consulting on IT and information security strategies and architectures
- Delivery of workshops and seminars
- IT security technology consulting and selection of suitable tools, processes and methods
- Expansion of the customer network and participation in the business area strategy
- Customer contact for further questions and ensuring the successful implementation of projects
- Developing strategies and processes related to the use of IT staff
- Supporting the expansion of the managed services business area
- Establishment of the penetration testing business area
- Supporting specialist departments in analyzing and identifying opportunities for improved management of business processes
- Recruitment of staff and planning of further development and qualifications
Principal Information Security Consultant
Profi Engineering Systems AG
- Establishment of information security consulting as a new consulting area
- Working with customer representatives from all functional areas
- Professional leadership of the information security consulting team
- Management of sales and engineering teams from the initial presentation of ideas through contract signing to project completion
- Active involvement in presales
- Finding solutions during escalations
- Proactive communication and responsibility for projects
- Strategic development of topics with direct reporting to management
- Further development and coaching of team members and other employees
- Leadership in line with the company culture
- Development and expansion of the consulting offering
- Information security consulting, project management, ISMS development and audit support
- Consulting on KRITIS, ISO 27001, BSI-Grundschutz, PCI DSS and VdS 3473
- Creation and introduction of policies, work instructions, process descriptions, operational documentation and manuals
- ITSM and process consulting
- Consulting on IT and information security strategies and architectures
- Delivery of workshops and seminars
- IT security technology consulting
- Selection of suitable tools, processes and methods
- Expansion of the customer network and participation in the business area strategy
- Customer contact for further questions and ensuring the successful implementation of projects
- Developing strategies and processes related to the use of IT staff
- Supporting the expansion of managed services
- Supporting specialist departments in analyzing and identifying opportunities for improved management of business processes and preparing analysis results
- Recruitment of staff and planning of further development and qualifications
Senior IT and Information Security Specialist
Klöckner und Co AG
- Management of information security for the Klöckner Group
- Establishment of the information security organization and ISMS
- Design, planning and review of infrastructure measures and management of implementation (IDS/IPS, SIEM, honeypots, firewalls)
- Preparation and presentation of information security topics for the executive board
- Conducting information security audits
- Conducting penetration tests and vulnerability scans
- Consulting and reporting on information and IT security
- Process analysis, documentation and design, including adaptation to security standards
- Selection, testing and introduction of comprehensive security solutions
- Conducting risk analyses according to ISO 27001 and developing proprietary risk analysis procedures
- Creation and introduction of an ISMS and its related policies and guidelines
- Structural analyses relating to information security
- Project management for the introduction and implementation of information security policies
- Performing the role of Information Security Officer
- Coordination and monitoring of contracted service providers
- Forensic and organizational investigation of information security incidents and measures
Senior Consultant, Auditor and IT Security Engineer, Information Security
Kai Viehmeier Consulting GmbH
- Consultant, committee member and co-author of the VdS 3473 Cyber-Security guideline for SMEs
- Creation and introduction of ISMS for customers
- Structural and organizational analyses of companies relating to information security and legal requirements
- Process analysis, documentation and design, including adaptation to security standards
- Conducting information security audits
- Conducting penetration tests and vulnerability scans
- Consulting customers on information and IT security according to ISO 27001, BSI-Grundschutz and VdS 3473
- Conducting risk analyses and developing proprietary risk analysis procedures
- Project management for introducing and implementing the requirements of VdS 3473
- Performing the role of Information Security Officer
- Configuration and installation of Cisco-based network components
Manager on the Quality and Training Team
Siemens Healthcare (ISK Personaldienstleistungs GmbH)
- Project management for projects introducing new services and processes
- Service Quality Management according to ITIL, ISO 27001 and ISO 9001: design and implementation of the ticket review process, conducting ticket reviews, statistics, analysis, reporting, initiation of corrective and preventive measures
- Employee training, certification and examinations
- Document management according to ITIL, ISO 27001 and ISO 9001: design and implementation, document administration and quality assurance
- Knowledge Management according to ITIL, ISO 27001 and ISO 9001: design and implementation, content administration and quality assurance
- Process management according to ITIL, ISO 27001 and ISO 9001: recording, documentation and improvement of various processes (Incident, Problem, Change, Knowledge Management, Employee Training)
Network Administration and IT Security Consultant
Pamec Papp Ingenieurgesellschaft
- IT security consulting
- Site-to-site VPN IPsec tunnel configuration and troubleshooting
- Network configuration and troubleshooting in a worldwide heterogeneous IT infrastructure using Cisco products
- Firewall and perimeter administration (Cisco ASA, Checkpoint, FortiGate)
- Network administration and support in customer networks (Cisco, Juniper, Huawei)
- Technical application, service portal and customer system support
- ITIL v3 Service Operation and Continual Service Improvement (CSI)
- Multilingual 1st- and 2nd-level support in an ISO 27001 organization
- Incident and Problem Management
- Project management
- Support and configuration of medical systems (CT, MR, AS, HS, DICOM, HL7)
- Syngo service software configuration and support
- System management support and configuration based on HP OpenView and CA Unicenter
- Information and data security concepts and principles; PHI/ePHI, HIPAA Security Standard
- User and knowledge base management
- Process recording, documentation and optimization
IT Security Manager Austria
Sandoz-Novartis International GmbH (Pidas GmbH)
- IT security management consulting
- Reporting to the CIO and CISO
- Project management for IT infrastructure and IT security
- Creation, review and adaptation of processes, SOPs and policies
- Information Security Officer in Sandoz IT
- Management of LAN and WAN connections and perimeter security
- Vulnerability Management and Penetration Testing
- Single Point of Contact for suppliers, service providers and external companies
- Antivirus and malware management
- Process documentation, optimization and implementation according to GxP, SOX and ITIL
- IT security incident and problem management
- Forensics in the event of attacks or infections
- Management of cross-company IT and IT security incidents
- Audits of third-party companies and partners
- Encryption of data carriers, network connections and network storage
- Adaptation of Sandoz systems to comply with standards in other environments
- Consulting and execution of hardware and software rollouts
- Consulting on the integration of EBEWE into Sandoz/Novartis systems
- IT quality management
- Training of the Sandoz help desk
Project Network and Rollout Engineer and Network Integration
HWS-Projekt-Engineering
- In-house and remote support for hardware, software, peripheral and network problems
- Hardware and software rollouts
- Active Directory administration and support
- Software distribution and licensing
Lecturer in Construction and IT Technology
Berufsförderungswerk Weißenburg
- Teaching construction and IT technology content
- Preparation of teaching materials and practical exercises
Project Network and Systems Engineer
Landesgewerbeanstalt (Staff Placement)
- Guidance and onboarding of additional project staff
- In-house, remote and telephone support (2nd Level) for hardware, software, peripheral and network issues
- Support and management of hardware and software rollouts
- Migration from Novell Directory Services to Active Directory as part of the integration into the TÜV Rheinland Group
- Troubleshooting and training colleagues in processes
- Network and user administration
- Rollout team leadership
Senior PC Technician, Southern Germany, Consultant and Deputy Branch Manager
Arlt Computer GmbH Nürnberg
- 1st- and 2nd-Level support (on-site and remote) for hardware, software and networks
- Warranty processing with manufacturers
- Installation, configuration and repair of various operating systems (Windows XP, Vista, 2000, 98, Mac OS X, Linux)
- Customer consulting and sales in network and server technology, hardware, software, Internet technology and multimedia
- Working with the inventory management system
- Internal knowledge transfer and information exchange using Novell GroupWise
- Training other technicians in internal processes
- Deputizing for the branch manager (cash reconciliation, inventory checks, staff management)
IT/Network Technician and Consultant for Private Clients and SMEs
Self-employed
- Network support and setup of TCP/IP networks and Internet integration
- Technical PC support: selection, setup, expansion, upgrading, error analysis and troubleshooting
- IT consulting: procurement and expansion of hardware, software and security solutions
- Support, creation and organization of websites and web servers (Dreamweaver, Flash, Linux Game Server)
- Organization and technical support of LAN parties (10–50 participants)
- Project management and leadership for integration and rollout projects
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Professional Services, Healthcare, Metals and Mining, Pharmaceutical, and Retail.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Strategy, Customer Service, Quality Assurance, and Audit.
Summary
With over 15 years of experience in information security, I support companies in implementing and optimizing ISMS based on standards such as ISO 27001. My focus is on developing and implementing IT security strategies, information security audits and risk analyses to ensure security and regulatory compliance.
I currently work as an information security and cybersecurity consultant, advising clients on topics such as data protection (GDPR), TISAX and IT project management. With my expertise in team leadership, the strategic development of business areas and proactive communication, I help create sustainable security solutions.
Skills
- Strategic Consulting And Project Management For The Implementation Of Patch Management
- Support In Establishing An Isms According To Bsi It-Grundschutz
- Revision Of Data Center It Security
- Introduction Of Identity And Asset Management
- Revision Of The Isms And Implementation According To German Standards When Entering The German Market
- Security Assessment And Isms According To Vds 3473 And Isms Implementation
- Implementation Of Iso 27001
- Handling A Cyber Attack And Consulting On Bafin Security Standards
- Consulting On Iso 27001 And It Security
- Information Security Consulting
- Establishment Of A Data Protection Management System
- Revision Of Internal Policies For Kritis
- Revision Of Internal Policies In The Context Of Kritis And Iso 27001
- Siem And Monitoring Market Analysis
- Handling An Information Security Incident And Closing Security Gaps
- Gdpr Consulting For The Introduction Of Cloud Solutions
- Development Of An It Emergency Manual
- Cybersecurity Attack
- Design And Documentation Of A Secure Backup Environment
- Project Management Of It Security Projects
- Tisax Consulting And Support
- Consulting And Project Management For The Establishment Of A Security Operations Center (Soc)
- Consulting In The Context Of Iso 27001 And Bsi It-Grundschutz In Software Development
- Auditing Internal Processes And Parts Of The It Security Landscape
- Principal Information Security Consultant
Languages
Education
Georg-Simon-Ohm University of Applied Sciences Nuremberg
Architecture · Nuremberg, Germany
Georg-Simon-Ohm University of Applied Sciences Nuremberg
Civil Engineering · Nuremberg, Germany
Georg-Simon-Ohm University of Applied Sciences Nuremberg
Electrical Engineering · Nuremberg, Germany
Certifications & licenses
ISMS Officer – ISO 27001
VOREST AG
Cyber-Security – Approval as Auditor and Subject Matter Expert (VdS 3474 / VdS 3473)
VdS Schadenverhütung GmbH · Cologne, Germany
VdS Certified Cyber Security Consultant
VdS Schadenverhütung GmbH
Driving licence categories: A and B
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Andreas is based in Masburg, Germany and prefers 100% remote projects.
Andreas speaks the following languages: German (Native), English (Advanced).
Andreas has at least 22 years of experience. During this time, Andreas has worked in at least 13 different roles and for 12 different companies. The average length of individual experience is 2 years and 8 months. Note that Andreas may not have shared all experience and actually has more experience.
Based on recent experience, Andreas would be well-suited for roles such as: Freelance Information Security Consultant, Head of Security Solutions / Technical Head of Information Security Consulting, Principal Information Security Consultant.
Andreas's most recent position is Freelance Information Security Consultant at A-R-C Andreas Rühl Consulting.
In recent years, Andreas has worked for A-R-C Andreas Rühl Consulting and Profi Engineering Systems AG.
Andreas is most experienced in industries like Information Technology, Professional Services, and Healthcare. Andreas also has some experience in Pharmaceutical, Metals and Mining, and Retail.
Andreas is most experienced in business areas like Information Technology, Project Management, and Strategy. Andreas also has some experience in Customer Service, Quality Assurance, and Audit.
Andreas has recently worked in industries like Information Technology and Professional Services.
Andreas has recently worked in business areas like Information Technology, Project Management, and Strategy.
Andreas holds a Bachelor in Civil Engineering from Georg-Simon-Ohm University of Applied Sciences Nuremberg.
Andreas has 5 certificates. Among them, these include: ISMS Officer – ISO 27001, Cyber-Security – Approval as Auditor and Subject Matter Expert (VdS 3474 / VdS 3473), and VdS Certified Cyber Security Consultant.
Andreas is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 6 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Federico L.
Nikolaus B.
Christian D.
Alexander S.
Daniel J.
Christian F.
Bernhard B.
Robert F.
Peter D.
Oliver F.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Freelance Information Security Consultant
Björn B.
Stephan S.
Thomas U.
Peter K.
Karl-Heinz R.
Christian G.
Jens B.
Dustin D.
Henry H.
Matthias K.
Nearby freelancers
Professionals working in or nearby Masburg, Germany
Kiriakos K.
Mark S.
Christian F.
Thomas M.
Matthias S.
Jan-David B.
Tariq B.
Joaquim L.
Hiltrud W.
Gerhard K.
