Herbert F.-Management Consultant
Check rate
Experience
Management Consultant
Siemens Energy
- Introduction of cyber risk management: establishment of risk governance and definition of processes
- Preparation of reporting and roll-out at HQ at management level
- Training for around 30 decentralized CISOs globally
Project Manager
ING DIBA
- Development and expansion of IT security / cyber: APT, penetration testing, technical state monitoring, security events, governance, threat intelligence, security event monitoring
- Creation of governance documentation, improvement and definition of processes
- Creation of user stories with implementation in ServiceNow
- Quality assurance and support for audits: creation of auditable documents and cooperation with internal and external auditors
- Implementation of DORA: gap analyses with IT and IT security, definition of required actions and implementation
- Implementation of local (Kritis, DGSVO) and international regulations (internal IT security, Supply Chain Act)
- Outsourcing/contracts: support for outsourcing cyber functions to Eastern Europe, contracts, DGSVO compliance, risk, negotiations through contract signing
Project Manager
HUK-Coburg
- Introduction of BCM: threat and risk analyses at headquarters, subsidiaries, and branches
- Development of strategy options and implementation of BCM processes at headquarters, HUK-Assistance, VRK Detmold, and Kassel
- Conducting more than 100 workshops for risk analysis and documentation of all business processes
- Creation and implementation of emergency processes and adjustment of technical requirements (telecommunications and IT)
- Negotiations with works council bodies through the conclusion of works agreements
- Creation of a specialist concept for crisis communication and implementation of corresponding processes
Project Coordinator / Business Analyst
AXA
- Preparation for the introduction of ISO 2700x: risk analyses in the area of business security, process definitions, and implementation
- Establishment of a CERT (Cyber Emergency Response Team)
- Review and improvement of site and building security
- Establishment of controlling for IS in ARIS and integration with ISO 22301 Business Continuity
- Planning and management of a four-day CERT cyber security exercise, including scenario development, training, management, and lessons learned
- Introduction of endpoint protection: market research, selection, project planning, and roll-out
- BCM/pandemic/DR integration at Winterthur Insurance after its acquisition by AXA: gap analysis, adjustment of emergency processes, integration into the crisis communication strategy, and merger of emergency teams
- Introduction of pandemic planning: workshops with stakeholders, strategy development, introduction of emergency processes (hygiene, communication, administration, emergency measures), training of the pandemic management team, purchasing and administration of hygiene products and medical supplies
- Introduction of BCM: threat analysis, strategy proposals with cost analysis, interviews and workshops (around 300), development and integration of software for managing an emergency organization of 1500 people
- Roll-out of emergency processes to all 14 branches, 2 call centers, and the bank
- Design, testing, and implementation of a BC tool for managing emergency processes and around 200 customized emergency plans
- Introduction of crisis communication: strategy development, workshops for crisis managers, communication matrix, individual emergency plans, external dark sites, and operational implementation
- Operational risk management: support with the introduction and calculation of operational risks in cooperation with the OR team
- Preparation for the establishment of AXA-Bank Europe Prague/Brno: strategy definition for entering the CR and SR market, market analysis of the Czech Republic/Slovakia, product analyses and legal requirements, presentation for management in Brussels
Project Manager
Commerzbank
- Further development of BCM: introduction of crisis communication, adjustment to audit requirements and MaRisk, establishment of a crisis team
- BCM exercises: scenario development, training of examiners and observers, management of exercises, lessons learned with internal audit
- Adjustment of the emergency data center (DR): analysis of the IT environment in Frankfurt, adjustment of the emergency processes of all departments, synchronization of processes and communication between Frankfurt and Prague
- BCM/DR exercise: test run of the IT fallback to the emergency data center and one week of emergency operations, scenario development, management, lessons learned, and final presentation
- Introduction of BCM for investment banking: threat and risk analysis, development of strategy options, support in establishing emergency trading rooms in Frankfurt, process definition and communication, live exercise, lessons learned, and final presentation
- Design, testing, and implementation of a BC tool for managing emergency processes and customized emergency plans
- Examples of success: maintaining operations in the emergency data center during violent protests and continuing operations for two weeks during flooding without outages
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Banking and Finance, Insurance, and Energy.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Operations, Audit, and Strategy.
Summary
I have built a solid track record in management consulting through diverse roles in energy, finance, insurance, and banking industries. I excel at designing and implementing risk and business continuity processes, developing effective governance frameworks, and executing complex security measures. My work ranges from establishing cyber risk management and building CERT teams to leading critical BCM projects with measurable impact.
I bring hands-on experience with process optimization, robust documentation, and audit support, supported by certifications in ISO 2700x, Lean Six Sigma, Scrum, and Prince2. I use my deep knowledge and structured approach to deliver reliable, secure, and efficient solutions in dynamic environments.
Skills
- In-Depth Knowledge Of Most Areas Of A Bank
- Good Overview Of Insurance Company Departments
- Good Business And Financial Know-How
- Extensive Experience With Emergency And Security Concepts
- Cross-Departmental Approaches Covering It, Finance, Risk, Customers, And Legal
Languages
Education
Executive MBA · Finance/East-West Management/EU Law · Krems an der Donau, Austria
Diplom "Exportkaufmann" · International Law/Financing/Logistics/Marketing
Certifications & licenses
ISO 2700x Lead Implementer (Informationssicherheit)
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Herbert is based in Prague, Czech Republic.
Herbert speaks the following languages: German (Native), English (Advanced), Czech (Intermediate).
Herbert has at least 27 years of experience. During this time, Herbert has worked in at least 3 different roles and for 5 different companies. The average length of individual experience is 5 years and 5 months. Note that Herbert may not have shared all experience and actually has more experience.
Based on recent experience, Herbert would be well-suited for roles such as: Management Consultant, Project Manager, Project Coordinator / Business Analyst.
Herbert's most recent position is Management Consultant at Siemens Energy.
In recent years, Herbert has worked for Siemens Energy and ING DIBA.
Herbert is most experienced in industries like Banking and Finance, Insurance, and Energy.
Herbert is most experienced in business areas like Information Technology, Project Management, and Operations. Herbert also has some experience in Audit and Strategy.
Herbert has recently worked in industries like Banking and Finance and Energy.
Herbert has recently worked in business areas like Information Technology, Audit, and Project Management.
Herbert holds a Master in Finance/East-West Management/EU Law and a Bachelor in International Law/Financing/Logistics/Marketing.
Herbert has 4 certificates. Among them, these include: ISO 2700x Lead Implementer (Informationssicherheit), PSM, Professional Scrum Master, and Prince2® Foundation.
Herbert is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 7 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Nikolaus B.
Alexander S.
Federico L.
Andreas R.
Robert F.
Peter D.
Daniel J.
Christian F.
Zoran J.
Karl-Heinz R.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Management Consultant
Tomas H.
Peter K.
Dustin D.
Wilhelm H.
Michael S.
Klaus J.
Gabriele B.
Henry H.
Károly A.
Sandra K.
Nearby freelancers
Professionals working in or nearby Prague, Czech Republic
Maxim L.
Martin P.
Martin D.
Jiri M.
Reuben C.
Petr P.
Barbora D.
Marek D.
Martin R.
Syrym S.
