Günther E.-Senior IT Risk & GRC Consultant | DORA | ICT Risk | ISO 27001 | NIS2
Check rate
Experience
IT Security & Governance Consulting (DORA & NIS2):
Freelance Assignment
Strategic consulting for the development and strengthening of ISMS structures (ISO 27001 / BSI IT-Grundschutz), including onboarding, gap analyses, and preparation of the IT organization for DORA requirements (ICT third-party risk) and NIS2 compliance. Auditing compliance requirements in a regulated environment.
Freelance IT Consultant & Auditor
Freelance Assignment
- Process & supplier management / Third-Party Risk Management: Auditing and strengthening incident reporting processes. Preparation for the EU DORA regulation and coordination of SLAs, OLAs, and supplier contracts (underpinning contracts) with ICT service providers in line with BAIT/MaRisk and DORA guidelines. Creation of audit-proof technical documentation (industry: FinTech / financial services).
Freelance IT Consultant & Auditor
Freelance Assignment
- Process architecture & auditing: Mapping, analyzing, and realigning business processes and IT service workflows. Conducting internal gap analyses to assess certification readiness and optimize quality processes (industry: manufacturing).
Freelance IT Consultant & Auditor
Freelance Assignment
- Resilience & Risk Management: Developing root-cause-based risk management strategies. Establishing Business Continuity Management (BCM) and disaster recovery concepts for critical IT infrastructures (industry: healthcare).
Freelance IT Consultant & Auditor
Freelance Assignment
- Infrastructure security & architecture review: Auditing, designing, and securing modern IT networks, B2B voice infrastructures (VoIP, SIP trunking), and hybrid communication systems in line with the highest security and availability standards (industry: telecommunications).
Senior Consultant TQM / Corporate Quality
Fujitsu Technology Solutions GmbH
- International coordination: Supporting up to 18 countries in the EMEA region; coaching and supporting local quality representatives.
- Integrated management systems: Developing a management system and reporting for quality (ISO 9001), environmental management (ISO 14001), ITIL (ISO 20000), and information security (ISO 27001).
- Performance & controlling: Monitoring and controlling the performance of management system implementation across EMEA countries.
- Auditing & BCM: Risk management, business continuity planning (BCM), conducting internal audits and training, and preparing for and supporting external audits.
Process Consultant International Quality Management
Siemens IT Service
- Process architecture: Establishing, implementing, and continuously maintaining the global reference process framework.
- Auditing & training: Conducting internal audits and practical employee training for IT processes.
Operations Manager – Office of Continuous Improvement
Siemens SBS
- KPI & workflow management: Project management for the development and operation of cross-country reporting on service metrics to improve processes.
Process Consultant – Support Center Manager
Siemens Business Services AG
- Service process design: Optimizing and modeling IT support processes using common maturity models.
- Technical controlling: Monitoring and managing service and quality metrics in the helpdesk environment.
Head of Support Center & Systems Technician
Siemens Nixdorf / Nixdorf Computer
- Leadership & operations: Disciplinary and professional team management in the Support Center (client/server/hardware); managing the end-user helpdesk for Continental Teves.
- Field operations & banking environment: Worldwide support, installation, and maintenance of critical systems on site, including assignments at TZE Eschborn and support for banking infrastructures.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Banking and Finance, Manufacturing, Telecommunication, and Healthcare.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Operations, Information Technology, Audit, Customer Service, Quality Assurance, and Strategy.
Summary
Senior IT Risk & GRC Consultant with many years of experience in large corporations and consulting at the intersection of IT security, risk management, governance, compliance, and IT service management.
Key areas include DORA, ICT Risk Management, ICT Third-Party Risk Management, ISMS according to ISO 27001, BSI IT-Grundschutz, NIS2, BCM, and IT audit.
Practical experience preparing IT organizations for DORA requirements, especially in ICT third-party risk, incident reporting processes, and SLA, OLA, and underpinning contract structures with ICT service providers. Additional experience in BAIT/MaRisk, regulatory compliance, gap analyses, and audit-proof documentation.
A particular strength is combining regulatory requirements with operational implementation: analyzing and assessing risks, examining weaknesses and threats based on their root causes, deriving measures, structuring processes, and documenting their implementation in an audit-ready manner.
Many years of international experience in large corporations at Fujitsu and Siemens, as well as experience with integrated management systems for quality, IT service management, and information security.
Skills
It Risk & Grc
- Dora
- Ict Risk Management
- Ict Third-Party Risk Management
- It Risk Management
- It Governance
- Grc
- Regulatory Compliance
It Security
- Iso/Iec 27001
- Isms
- Bsi It-Grundschutz
- Nis2
- Kritis
- It Security
- Security Gap Analysis
- It Audit
Operational Resilience
- Bcm
- Disaster Recovery
- Operational Resilience
- Business Continuity
It Service Management
- Itil
- Iso 20000
- Incident Management
- Change Management
- Problem Management
- Sla / Ola / Uc
Risk / Audit / Process
- Risk Assessment
- Gap Analysis
- Internal Audit
- Process Management
- Process Design
- Continuous Improvement
Languages
Education
Nixdorf Computer AG
Chamber of Industry and Commerce (IHK) Level Training · Information Electronics Technician / Telecommunications Equipment Mechanic. · Paderborn, Germany
Certifications & licenses
BayTech Audit Certificate
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Günther is based in Paderborn, Germany and can operate in on-site, hybrid, and remote work models.
Günther speaks the following languages: German (Native), English (Advanced), French (Elementary).
Günther has at least 38 years of experience. During this time, Günther has worked in at least 7 different roles and for 6 different companies. The average length of individual experience is 4 years and 9 months. Note that Günther may not have shared all experience and actually has more experience.
Based on recent experience, Günther would be well-suited for roles such as: IT Security & Governance Consulting (DORA & NIS2):, Freelance IT Consultant & Auditor, Senior Consultant TQM / Corporate Quality.
Günther's most recent position is IT Security & Governance Consulting (DORA & NIS2): at Freelance Assignment.
In recent years, Günther has worked for Freelance Assignment.
Günther is most experienced in industries like Information Technology, Banking and Finance, and Manufacturing. Günther also has some experience in Telecommunication and Healthcare.
Günther is most experienced in business areas like Operations, Information Technology, and Audit. Günther also has some experience in Customer Service, Quality Assurance, and Strategy.
Günther has recently worked in industries like Banking and Finance and Information Technology.
Günther has recently worked in business areas like Audit, Information Technology, and Strategy.
Günther attended Nixdorf Computer AG for Information Electronics Technician / Telecommunications Equipment Mechanic..
Günther has 4 certificates. Among them, these include: AXELOS ITIL V3 Foundation, BayTech Audit Certificate, and HP ITIL FoundationPlus Racing Simulation.
Günther is immediately available part-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Federico L.
Peter K.
Karl-Heinz R.
Achim K.
Henry H.
Michael S.
Wilhelm H.
Alwin F.
Markus M.
Dustin D.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a IT Security & Governance Consulting (DORA & NIS2):
Najat D.
Christian D.
Cedric B.
Alexander S.
Matthias K.
Julian V.
Robert F.
Andreas R.
Firas J.
Pierre G.
Nearby freelancers
Professionals working in or nearby Paderborn, Germany
Rufus H.
Oliver F.
Thorsten H.
Ciro M.
Wadim L.
Stephan F.
Benito E.
Marco S.
Holger H.
Alexander P.
