Lucas Löcken-Consultant in Information Security, Data Protection and Business Continuity Management

Check rate
Experience
Consultant in Information Security, Data Protection and Business Continuity Management
Consulting and support in gathering information security requirements (IT-SIG 2.0, KRITIS, TISAX, industry standards, ISO 27001, A-960/1)
Acting as data protection officer and auditor as well as information security auditor
Conducting employee training
Updating risk analyses with risk treatment
Designing information security concepts based on BSI IT Baseline Protection, KRITIS, ISO 27001, A-960/1 and TISAX
Identifying information security requirements for IT systems (WAN, LAN, clouds) and overseeing implementation
Administering the ISMS using Verinice and SAVe
Integrating security concepts into existing management systems according to ISO 9001 and ISO 27001
Process management and modeling according to ITIL
Management consulting for integrating an ISMS into integrated management systems
Advising on data protection (GDPR, BDSG)
Planning and conducting data protection audits
Designing risk management processes and methodologies according to ISO 27005, ISO 31000 and BSI 200-3
Developing and setting up training programs for employees
Lecturer / Trainer for Information Security
- Planning and conducting seminars, training sessions and webinars
- Training future BSI IT Baseline Protection practitioners and consultants as well as ISOs and CISOs
- Teaching BSI IT Baseline Protection, ITIL, ISO 27001, risk management, integrated management systems and business continuity management
Chief Information Security Officer
Chief Information Security Officer
- Strategic consulting for the board of directors and executive management
- Adapting the national ISMS for international sites (India, USA, France, Poland, Italy)
- Creating audit programs, audit planning and execution
- Maintaining and continuously improving the ISMS
- Identifying information security requirements for IT systems and applications
- Supporting implementation, testing effectiveness and monitoring results
Data Protection Auditor
Data Protection Auditor
- Responsibility for data protection nationally and internationally
- Creating data protection concepts, impact assessments and protection needs analyses
- Conducting audits
- Updating technical and organizational measures
- Advising the board of directors and executive management on data protection law issues
- Planning and conducting data protection audits
- Continuing technical and organizational measures (TOMs)
Data Protection Officer
Data Protection Officer
- Creating data protection concepts, impact assessments and protection needs analyses
- Conducting audits
- Updating technical and organizational measures
- Advising the board of directors and executive management on data protection law issues
- Creating data protection policies on access control concepts, security zones, authorization concepts, role concepts and awareness training
Information Security Officer
Information Security Officer
- Establishment, implementation, operation and monitoring of an ISMS based on BSI IT-baseline protection and ISO 27001, TISAX
- Development of security concepts for networks, user permissions, and emergency management plans
- Audit planning and execution
- Expansion of the scope to all national sites
Consultant Information Security
Consultant Information Security
- Establishment and implementation of multiple ISMS in line with BSI IT-baseline protection and ISO 27001
- Development of information security concepts according to A-960/1
- Collection of requirements through interviews and document reviews
- Creation of policies, process descriptions, procedural instructions, and work instructions
- Monitoring of the ISMS and performance checks
- Integration of security concepts and processes into an existing management system according to ISO 9001 and ISO 27001
- Process management of information security processes in line with ITIL
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Professional Services, and Education.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Legal, Audit, and Quality Assurance.
Skills
- International Projects
- Development Of Information Security Management Systems
- Iso 27001 - Isms
- Trusted Information Security Assessment Exchange - Tisax
- Bsi It Baseline Protection
- Security Concepts
- Audits
- Isms Tools
- Eu General Data Protection Regulation Gdpr
- German Federal Data Protection Act Bdsg
- Integrated Management Systems
- Iso 22301 - Business Continuity Management Bcms
- Iso 31000 Risk Management
- Iso 27005 Is Risk Management Lean Management
- Iso 9001 Quality Management
- Continuous Improvement Process - Cip
- Kritis
- A-960/1
- Employee Training
Languages
Education
Düsseldorf University of Applied Sciences
Degree in Computer Science · Computer Science · Düsseldorf, Germany
Certifications & licenses
Information Security Lead Auditor
TÜV
EFQM Foundation
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Lucas is based in Nordwalde, Germany.
Lucas speaks the following languages: German (Native), English (Advanced).
Lucas has at least 13 years of experience. During this time, Lucas has worked in at least 7 different roles and for 5 different companies. The average length of individual experience is 2 years and 11 months. Note that Lucas may not have shared all experience and actually has more experience.
Based on recent experience, Lucas would be well-suited for roles such as: Consultant in Information Security, Data Protection and Business Continuity Management, Lecturer / Trainer for Information Security, Chief Information Security Officer.
Lucas's most recent position is Consultant in Information Security, Data Protection and Business Continuity Management.
In recent years, Lucas has worked for Chief Information Security Officer, Data Protection Auditor, and Data Protection Officer.
Lucas is most experienced in industries like Information Technology, Professional Services, and Education.
Lucas is most experienced in business areas like Information Technology, Legal, and Audit. Lucas also has some experience in Quality Assurance.
Lucas has recently worked in industries like Professional Services, Information Technology, and Education.
Lucas has recently worked in business areas like Legal, Audit, and Information Technology.
Lucas attended Düsseldorf University of Applied Sciences for Computer Science.
Lucas has 5 certificates. Among them, these include: Information Security Lead Auditor, Information Security Officer, and Data Protection Auditor.
The availability of Lucas needs to be confirmed.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 25 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Consultant in Information Security, Data Protection and Business Continuity Management
Nearby freelancers
Professionals working in or nearby Nordwalde, Germany
