Lucas L.-Consultant in Information Security, Data Protection and Business Continuity Management

Check rate
Experience
Consultant in Information Security, Data Protection and Business Continuity Management
Advising and supporting the identification of information security requirements (IT-SIG 2.0, KRITIS, TISAX, industry standards, ISO 27001, A-960/1)
Serving as a data protection officer and auditor, as well as an Information Security Auditor
Conducting employee training
Updating risk analyses and risk treatment
Designing information security concepts based on BSI IT-Grundschutz, KRITIS, ISO 27001, A-960/1 and TISAX
Identifying information security requirements for IT systems (WAN, LAN, clouds) and supporting their implementation
Administering the ISMS using Verinice and SAVe
Integrating security concepts into existing management systems in accordance with ISO 9001 and ISO 27001
Process management and modeling in accordance with ITIL
Advising management on integrating an ISMS into integrated management systems
Advising on data protection (GDPR, BDSG)
Planning and conducting data protection audits
Designing risk management processes and methods in accordance with ISO 27005, ISO 31000 and BSI 200-3
Developing and setting up training programs for employees
Lecturer / Trainer in Information Security
- Planning and delivering seminars, training sessions and webinars
- Training aspiring BSI IT-Grundschutz practitioners and consultants, as well as ISOs and CISOs
- Teaching BSI IT-Grundschutz, ITIL, ISO 27001, risk management, integrated management systems and Business Continuity Management
Chief Information Security Officer
Chief Information Security Officer
- Providing strategic advice to the board and executive management
- Adapting the national ISMS for international locations (India, USA, France, Poland, Italy)
- Creating audit programs, planning audits and conducting them
- Maintaining and continuously improving the ISMS
- Identifying information security requirements for IT systems and applications
- Supporting implementation, checking effectiveness and monitoring results
Data Protection Auditor
Data Protection Auditor
- Managing data protection nationally and internationally
- Creating data protection concepts, impact assessments and protection needs analyses
- Conducting audits
- Updating technical and organizational measures
- Advising the board and executive management on data protection matters
- Planning and conducting data protection audits
- Maintaining technical and organizational measures (TOMs)
Data Protection Officer
Data Protection Officer
- Creating data protection concepts, impact assessments and protection needs analyses
- Conducting audits
- Updating technical and organizational measures
- Advising the board and executive management on data protection matters
- Creating data protection policies for access control concepts, security zones, authorization concepts, role concepts and awareness training
Information Security Officer
Information Security Officer
- Set up, introduced, operated and monitored an ISMS based on BSI IT-Grundschutz and ISO 27001, TISAX
- Created security concepts for networks, user permissions and emergency management plans
- Planned and conducted audits
- Expanded the scope to include all national locations
Information Security Consultant
Information Security Consultant
- Set up and implemented several ISMSs based on BSI IT-Grundschutz and ISO 27001
- Created information security concepts in accordance with A-960/1
- Collected requirements through interviews and document reviews
- Created policies, process descriptions, procedures and work instructions
- Monitored the ISMS and conducted effectiveness checks
- Integrated security concepts and processes into the existing management system in accordance with ISO 9001 and ISO 27001
- Managed information security processes in accordance with ITIL
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Professional Services, and Education.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Legal, Audit, and Quality Assurance.
Skills
- International Projects
- Development Of Information Security Management Systems
- Iso 27001 - Isms
- Trusted Information Security Assessment Exchange - Tisax
- Bsi It-Grundschutz
- Security Concepts
- Audits
- Isms Tools
- General Data Protection Regulation Gdpr
- Federal Data Protection Act Bdsg
- Integrated Management Systems
- Iso 22301 - Business Continuity Management Bcms
- Iso 31000 Risk Management
- Iso 27005 Information Security Risk Management Lean Management
- Iso 9001 Quality Management
- Continuous Improvement Process - Cip
- Kritis
- A-960/1
- Employee Training
Languages
Education
FH Düsseldorf
Computer Science studies · Computer Science · Düsseldorf, Germany
Certifications & licenses
Information Security Lead Auditor
TÜV
EFQM Foundation
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Lucas is based in Nordwalde, Germany.
Lucas speaks the following languages: German (Native), English (Advanced).
Lucas has at least 14 years of experience. During this time, Lucas has worked in at least 7 different roles and for 5 different companies. The average length of individual experience is 2 years and 11 months. Note that Lucas may not have shared all experience and actually has more experience.
Based on recent experience, Lucas would be well-suited for roles such as: Consultant in Information Security, Data Protection and Business Continuity Management, Lecturer / Trainer in Information Security, Chief Information Security Officer.
Lucas's most recent position is Consultant in Information Security, Data Protection and Business Continuity Management.
In recent years, Lucas has worked for Chief Information Security Officer, Data Protection Auditor, and Data Protection Officer.
Lucas is most experienced in industries like Information Technology, Professional Services, and Education.
Lucas is most experienced in business areas like Information Technology, Legal, and Audit. Lucas also has some experience in Quality Assurance.
Lucas has recently worked in industries like Professional Services, Information Technology, and Education.
Lucas has recently worked in business areas like Legal, Information Technology, and Audit.
Lucas attended FH Düsseldorf for Computer Science.
Lucas has 5 certificates. Among them, these include: Information Security Lead Auditor, Information Security Officer, and Data Protection Auditor.
Lucas is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 14 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Consultant in Information Security, Data Protection and Business Continuity Management
Nearby freelancers
Professionals working in or nearby Nordwalde, Germany
