Günther Eufinger - Information Security Consultant

Q: Where is Günther based?

Günther is based in Offenbach am Main, Germany .

Q: What languages does Günther speak?

Günther speaks the following languages: German (Native), English (Advanced) .

Q: How many years of experience does Günther have?

Günther has at least 17 years of experience. During this time, Günther has worked in at least 6 different roles and for 11 different companies . The average length of individual experience is 1 year and 5 months . Note that Günther may not have shared all experience and actually has more experience.

Q: What is Günther's latest experience?

Günther's most recent position is Senior Consultant at ISMS Rollout – Information Security Certification (ISO 27001) .

Q: What companies has Günther worked for in recent years?

In recent years, Günther has worked for ISMS Rollout – Information Security Certification (ISO 27001) , Governance & Corporate Security & Information Cyber Security Program , Concept for the Financial Account Information Act (FKAustG) , and IT Implementation of the New Regulation for Protected Accounts Against Attachment .

Q: Which industries is Günther most experienced in?

Günther is most experienced in industries like Banking and Finance , Information Technology , and Manufacturing . Günther also has some experience in Professional Services and Automotive .

Q: Which business areas is Günther most experienced in?

Günther is most experienced in business areas like Project Management , Information Technology , and Quality Assurance . Günther also has some experience in Business Intelligence , Product Development , and Operations .

Q: Which industries has Günther worked in recently?

Günther has recently worked in industries like Information Technology , Professional Services , and Banking and Finance .

Q: Which business areas has Günther worked in recently?

Günther has recently worked in business areas like Information Technology , Project Management , and Business Intelligence .

Recommended expert

Offenbach am Main, Germany

Check rate

Experience

Jun 2023 - Aug 2025

2 years 3 months

Senior Consultant

ISMS Rollout – Information Security Certification (ISO 27001)

Built and successfully certified the Information Security Management System (ISMS) according to ISO 27001 in seven country organizations (Ghana, India, Bangladesh, Uzbekistan, Serbia, Kosovo, Albania).
Full implementation of the ISMS from kick-off phase to certification, including defining the governance structure and process landscape.
Developed and delivered target-group-specific trainings, workshops, and coaching sessions for local responsible persons on the basics of information security and ISMS operations.
Designed and continuously improved training concepts and content to increase understanding and acceptance.
Identified and implemented improvements in processes and tools, including risk management for international projects.
Optimized central ISMS core processes from the idea through pilot operation and fine-tuning to global rollout.
Optimized knowledge management, as well as work aids and methods for the global ISMS team.
Built and moderated cross-functional coordination with key interfaces to the ISMS.
Microsoft Teams, Excel, SharePoint Lists, Power Apps.

Feb 2022 - Jun 2023

1 year 5 months

Project Manager / Business Analyst

Governance & Corporate Security & Information Cyber Security Program

Expanded management systems for crisis response and maintaining delivery capability in terms of business continuity.
Project coordinator in the company-wide Cyber Security Program.
Updated the mission statements of the business units: values, tasks, and guiding principles in line with the corporate strategy.
Revised the central policies for corporate security and crisis management, information security.
Content and technical design of KPI reporting.
Concept and moderation for developing the roadmap for company-wide ISMS governance in line with TISAX / ISO 27001.
Main focus areas: cyber risk assessment and cyber incident and emergency management.
Coached project teams for efficient project delivery and ensured project results.
Project management based on an agile framework.
Microsoft Teams, Excel, SharePoint Lists, Power Apps, Power BI.

Sep 2021 - Dec 2021

4 months

Business Analyst

Concept for the Financial Account Information Act (FKAustG)

Business analysis and concept development for implementing the new legal regulation related to reporting account information to tax authorities (FKAustG).
Validated the assignment and objective.
Designed and moderated management workshops to identify relevant processes and systems.
Led the definition of technical requirements.
Evaluated technical and operational risks.
Process analysis and documentation.
Derived solution concepts and recommendations.
Prepared the results report.
Confluence, MS Office 365.

Mar 2021 - Dec 2021

10 months

Project Manager

IT Implementation of the New Regulation for Protected Accounts Against Attachment

Implemented the new legal requirements for protected accounts against attachment in the mainframe HOST area, including connection of self-service devices (banking terminal and digital customer terminal).
Verified the assignment and objective.
Supported the business analysis, including risk analysis.
Defined the project organization and milestone planning.
Defined the IT requirements.
Led management workshops to define the technical requirements, including risk and security requirements.
Accepted the technical concepts for the mainframe infrastructure.
Budgeted, commissioned, and supported the technical implementation by vendors.
Managed the product backlog for agile program parts.
Quality assurance & testing: coverage, test strategy, etc.
Test concept and lead execution through all phases and final acceptance.
Preparation of go-live, pilot, and rollout.
Budgeting, project control, and reporting to the SteeCo.
HP ALM for defining requirements, in-house tool for budget and progress reporting, Confluence for defining requirements, use cases, and product backlog.

Jun 2019 - Dec 2020

1 year 7 months

Project Manager

Information and Cyber Security Program

Expanded the digital security architecture in the areas of IT security, Operations Technology Security (OT security), and information security.
Expanded the Information Security Management System as an umbrella function in close cooperation with the CISO.
Supported the Chief Information Security Officer (CISO) as program lead in conceptual and administrative matters.
Strategic project alignment.
Defined workstreams and deliverables.
Prioritized measures.
Milestone planning.
Designed and created project reports for management.
Stakeholder management and communication.
Budget planning and control.
Accepted deliverables from the workstreams.
Ensured audit-compliant project documentation.
Structured project management according to PRINCE.

May 2018 - Feb 2019

10 months

Project Manager

Heraeus Gruppe

Expansion of group-wide data protection to meet the requirements of the GDPR.
Corresponding expansion of the data protection management system for the Heraeus Group and its subsidiaries.
Stakeholder analysis.
Deriving project strategy, roadmap, and project structure.
Defining data protection processes: from documenting procedures to handling incidents.
Change management: development and implementation of extensive training and awareness measures for over 400 participants.
Workshops with executives from all business units.
Capturing and analyzing existing processing of personal data.
Implementation of an IT system for data protection management.
Business analysis, gathering requirements from stakeholders.
Process design and definition of user stories.
Managing the product backlog.
Supporting development in close cooperation with the Scrum team.
Project management using both classic methods and agile management for the IT solution.
Reporting to the SteeCo.

Apr 2016 - Apr 2018

2 years 1 month

Product Owner

lexiCan

Concept, technical implementation, and delivery of the completely redesigned product version of the lexiCan wiki software for over 500 business customers.
Analysis of market requirements and the competitive situation.
Market positioning.
Defining the core requirements.
Converting them into use cases.
Developing the use cases into technical concepts.
Managing the product backlog.
Leading the UX design process.
Supporting development and testing.
Supporting the market launch and market penetration.
Building quality assurance for the end customer.

Oct 2014 - Aug 2016

1 year 11 months

Project Manager

Schaeffler AG

Group-wide expansion and establishment of the Compliance Management System (CMS) for Schaeffler AG and the Schaeffler Group.
Analysis of the entire IT landscape for compliance risks.
Supporting the Chief Information Security Officer (CISO) as program lead in conceptual and administrative matters.
Supporting target definition.
Concept and design of the expanded Compliance Management System.
Concept for the first comprehensive and structured analysis of compliance risks.
Concept and planning of the workshop series for defining and prioritizing compliance measures.
Evaluating inputs for the analysis.
Building risk reporting.
Concept and implementation for establishing the Group Compliance Risk Committee (GCRC).
International rollout of the measures across all regions.
Tracking implementation and reporting.

May 2014 - Oct 2014

6 months

Team Lead Central Compliance Services

Deutsche Bank Gruppe

Enforcement of IT governance and audit compliance for all critical business applications of the Deutsche Bank Group.
Translating audit requirements into a remediation concept and establishing the necessary business processes.
Managing the central product backlog in HP ALM.
Continuous prioritization.
Setting up consolidated status reporting from the individual Scrum teams.
Several optimization cycles of the processes in the program.
Reporting to stakeholders and program management.
Agile project management.

Sep 2010 - Mar 2014

3 years 7 months

Business Analyst

Deutsche Bank AG

Various projects to improve services and operations for the self-service business of Deutsche Bank AG.
Migration of the operations platform, introduction of new middleware and operating systems.
Setting up the business analysis team.
Defining the scope of analysis based on the framework conditions.
Developing the approach and methods for business analysis.
Implementing and structuring the analysis areas in workshops.
Quality assurance through active coordination with Postbank employees.
Aligning the results with the involved departments until final approval.
Concept for quality assurance and rollout approach.

Feb 2010 - Sep 2010

8 months

Project Manager

Deutsche Bank AG

Migration of Berliner Bank and handling of transactions in payment processing (direct debits, transfers, checks).
Implementation of two new software systems and adjustments to the existing core IT infrastructure of Deutsche Bank AG.
Gathering requirements from Berliner Bank products.
Definition of requirements for IT and process changes.
Leading the teams for functional and technical system design.
Monitoring the low level design and implementation by the IT service provider.
Leading and monitoring the test cycles (functional test, integration test, UAT).
Transition of the software products into production.
Project reporting and risk management.
Moderation and coordination between teams and business units.

May 2007 - Dec 2009

2 years 8 months

Project Manager

MasterCard Worldwide

Overall project for taking over the Lufthansa Miles & More credit card portfolio: transfer of customer data, design and production of the cards, issuance to more than 1 million customers.
First introduction of contactless payment technology at the POS in Germany.
Verification of project goals and milestone planning with eight partner companies involved.
Coordination of project tasks across all participating companies.
Publication of regular and ad-hoc reports for senior management.
Moderation of coordination meetings and project documentation.
Temporary takeover of project management for MasterCard.
Concept for the technical basis to systematically capture technical issues related to card sales.
Definition of criteria for the systematic evaluation of the issues.
Coordination of the initial analysis and distribution of the issues to subsequent units.
Tracking and support of the follow-up work.
Design and execution of reporting.

Industry Experience

See where this freelancer has spent most of their professional time.

Experienced in Banking and Finance, Information Technology, Manufacturing, Professional Services, and Automotive.

Banking and Finance

Information Technology

Manufacturing

Professional Services

Automotive

Business Area Experience

See which departments and functions this freelancer has contributed to most.

Experienced in Project Management, Information Technology, Quality Assurance, Business Intelligence, Product Development, and Audit.

Project Management

Information Technology

Quality Assurance

Business Intelligence

Product Development

Audit

Summary

For over 10 years, I have been helping projects in security and risk management succeed, and in recent years with a clear focus on information security. In this area, I work for international corporate groups as well as public-sector clients.

I bring strong skills in designing suitable policies and service-oriented processes and tools for risk management based on established standards such as ISO 27001 and NIST.

I am supported in this by outstanding analytical skills and structured communication. I also bring a sense for what is practical and for the human factor in this task.

Think systemically, act pragmatically and as a team.

Skills

Over 10 Years Of Experience In Designing And Implementing Management Systems, Especially Isms And Grc: From Planning To Successful Certification
Several Years Of Experience In System Design For Critical Infrastructure (Kritis)
Several Years Of Experience Working With Standards (Iso 27001, Iso 31000, Bsi, Nist, Etc.)
Outstanding Expertise In User-Oriented Design Of Policies, Processes And Systems, And In Coordinating With Related Areas
Project Management Professional With Over 20 Years Of Experience, Skilled In Both Agile And Classic Methods
Automation And Integration Of Compliance Requirements Into Processes, Including Consistent Supplier Management
Extensive Expertise In Performance Measurement (Kpi)
Strong Implementation Skills And Team Competence
Communication Professional, Especially For Preparing Complex Technical Matters In A Reader-Friendly Way, Also For Board-Level Audiences

Languages

German

Native

English

Advanced

Education

Diploma in Industrial Engineering · Industrial Engineering

Certifications & licenses

ISO 27001

Scrum Master

Scrum Product Owner

Statistics

Experience

Total positions 12

Experience in Banking and Finance 8 y

Avg length 1 y 6 m

Longest experience 3 y 6 m

Expertise

Recent roles Senior Consultant, Project Manager / Business Analyst, Business Analyst

Main industries Banking and Finance, Information Technology, Manufacturing

Main business areas Project Management, Information Technology, Quality Assurance

Qualifications

Highest degree Bachelor

Certifications earned 4

Profile

Created

August 2025

Last Update

August 2026

Need a freelancer? Find your match in seconds.

Try FRATCH GPT

Frequently asked questions

Have questions? Find more information here.

Günther is based in Offenbach am Main, Germany.

Günther speaks the following languages: German (Native), English (Advanced).

Günther has at least 17 years of experience. During this time, Günther has worked in at least 6 different roles and for 11 different companies. The average length of individual experience is 1 year and 5 months. Note that Günther may not have shared all experience and actually has more experience.

Based on recent experience, Günther would be well-suited for roles such as: Senior Consultant, Project Manager / Business Analyst, Business Analyst.

Günther's most recent position is Senior Consultant at ISMS Rollout – Information Security Certification (ISO 27001).

In recent years, Günther has worked for ISMS Rollout – Information Security Certification (ISO 27001), Governance & Corporate Security & Information Cyber Security Program, Concept for the Financial Account Information Act (FKAustG), and IT Implementation of the New Regulation for Protected Accounts Against Attachment.

Günther is most experienced in industries like Banking and Finance, Information Technology, and Manufacturing. Günther also has some experience in Professional Services and Automotive.

Günther is most experienced in business areas like Project Management, Information Technology, and Quality Assurance. Günther also has some experience in Business Intelligence, Product Development, and Operations.

Günther has recently worked in industries like Information Technology, Professional Services, and Banking and Finance.

Günther has recently worked in business areas like Information Technology, Project Management, and Business Intelligence.

Günther holds a Bachelor in Industrial Engineering.

Günther has 4 certificates. Among them, these include: ISO 27001, ITIL Foundation, and Scrum Master.

Günther is immediately available for suitable projects.

Günther's rate depends on the specific project requirements. Please use the Meet button on the profile to schedule a meeting and discuss the details.

To hire Günther, click the Meet button on the profile to request a meeting and discuss your project needs.

Daily Rate Distribution

0 1 2 3 4

<€480 €640-800 €800-960 €960-1120 €1120+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1000

750

500

250

Daily rate avg. 923 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1000

750

500

250

Median rate 932 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.