Mischa G.-NFR Manager | IT & ICT Risk | DORA | ISO 27001
Check rate
Experience
Non-Financial Risk Officer
Nationale-Nederlanden
- Temporary cover for an absent non-financial risk officer.
- Operational scope: incident intake and follow-up, internal control testing, and first-line reporting for the Belgian entity.
Senior IT Security Risk Manager
Argenta BVG
- Contributed to the ISO 27001 information security management system and was responsible for deploying the risk part of DORA, including third-party vetting, GDPR and coordination of regulatory audits.
- Deployed the DORA risk component under the chief information security officer, with supplier due diligence and audit steering in place. GRC tooling: OneTrust.
- Led the data security project, including data-driven security classification.
IT risk and data security
Securitas Intelligence Services Global
- Set up a group IT risk function where none existed.
- Delivered one risk model based on ISO 31000, plus ISO 27001 control monitoring, identity and access management, and third-party risk and security assessments.
IT security risk
Equens Worldline
- Set up ISAE 3000 GDPR audits in parallel with the ISAE 3402 IT security audits, and tightened the internal control framework across Europe.
- Scoped, executed and followed up the assurance engagements, and left a tighter first-line control setup.
IT security risk / information security
BNP Paribas Fortis
- Worked within the bank's existing risk framework on third-party management, GDPR evaluations, GDPR control programmes and PCI DSS compliance activities, including contractual PCI DSS quality assurance. GRC tooling: RSA Archer.
- Set security policy and norms, carried out MiFID work, and gave guidance on policy compliance to Agile development teams in retail payments, online banking and card applications.
- Tracked audit and regulatory findings, carried out third-party IT risk and security evaluations, and analysed NIS1.
Interim
ING Investment Management
- First interim assignment, nine months. Made the business unit Basel II compliant.
- Worked with the supervisor on regulatory capital and the calculation method, and set up the processes for Basel II compliance and reporting.
Manager
Protiviti
- Sarbanes-Oxley (SOX) and JSOX assignments, and sourced internal audit, for clients including ABN AMRO, GMAC, Canon and Mitsui.
Regional Operational Risk Manager
ING Investment Management Europe
- Rolled out Basel II operational risk across the European entities and reduced operational-risk capital charges.
- Combined Basel II, MiFID, UCITS 3, Dutch financial supervision, Sarbanes-Oxley and SAS 70 controls. Designed an incident loss database later used as a model across ING. Managed business continuity, disaster recovery and incident response, with sign-off from regulators and auditors.
Business process engineer
ING Investment Management
- Documented processes, made them more efficient and placed control points. Analysed insourcing and outsourcing.
- Tested the Charles River Development and SimCorp Dimension trading platforms as part of process integration.
Senior Auditor
ING Group, Corporate Audit Services
- Audited financial statements, systems and processes, including anti-money laundering, know-your-customer, procedural penetration testing and regulatory reporting.
Assistant auditor
PricewaterhouseCoopers
- Audit support on financial statements and processes.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Banking and Finance, Insurance, Professional Services, and Manufacturing.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Audit, Information Technology, Quality Assurance, and Finance.
Summary
Independent consultant to banks, insurers, payment institutions and other critical infrastructure and its stakeholders. IT risk and information security assignments report to the chief information security officer and cover ISO 27001, the Digital Operational Resilience Act (DORA), the General Data Protection Regulation (GDPR), third-party risk and ISAE assurance. The DORA work is relevant to NIS2 through ICT risk, third-party risk and incident reporting. Non-financial risk assignments cover incident management, internal control testing and operational risk. The current assignment at Nationale-Nederlanden Belgium, July to December 2026, is an operational absence cover. Target roles remain IT and data risk manager and non-financial risk manager.
Skills
- It Risk And Information Security: Iso 27001 And Iso 27002, With Nist As A Complementary Framework, Cybersecurity Governance, Identity And Access Management, Security Architecture And Data Classification.
- Regulatory Programmes: Dora, Gdpr, Mifid, Ucits And Basel Ii: Design, Rollout, Testing And Evidence For Supervisors. Control Work Relevant To Nis2 Covers Ict Risk, Third-Party Risk And Incident Reporting.
- Third Parties And Assurance: Supplier Due Diligence, Isae 3402 And Isae 3000 Assurance, Contractual Pci Dss Quality Assurance And Coordination Of Regulatory Audits.
- Non-Financial Risk: Support To A Non-Financial Risk Manager, Operational Risk, Incident Management, Internal Control Testing, First-Line Control Design, Business Continuity And Crisis Management.
- Grc Tooling: Onetrust (Argenta) And Rsa Archer (Bnp Paribas Fortis).
Languages
Education
Rotterdam School of Management, Erasmus University Rotterdam
Master of Science · Financial Management Accounting and Control · Rotterdam, Netherlands
Erasmus School of Accounting and Assurance, Erasmus University Rotterdam
Postdoctoral Registeraccountant programme (Certified Public Accounting) · Rotterdam, Netherlands
Certifications & licenses
De Baak
Postdoctoral Registeraccountant programme (Certified Public Accounting)
Erasmus School of Accounting and Assurance, Erasmus University Rotterdam
ISACA
ISACA
Young Management Development
ING Management School, Heemstede
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Mischa is based in Hückelhoven, Germany.
Mischa speaks the following languages: English (Native), Dutch (Native), German (Intermediate), French (Elementary).
Mischa has at least 27 years of experience. During this time, Mischa has worked in at least 11 different roles and for 10 different companies. The average length of individual experience is 2 years and 5 months. Note that Mischa may not have shared all experience and actually has more experience.
Based on recent experience, Mischa would be well-suited for roles such as: Non-Financial Risk Officer, Senior IT Security Risk Manager, IT risk and data security.
Mischa's most recent position is Non-Financial Risk Officer at Nationale-Nederlanden.
In recent years, Mischa has worked for Nationale-Nederlanden and Argenta BVG.
Mischa is most experienced in industries like Banking and Finance, Insurance, and Professional Services. Mischa also has some experience in Manufacturing.
Mischa is most experienced in business areas like Audit, Information Technology, and Quality Assurance. Mischa also has some experience in Finance.
Mischa has recently worked in industries like Banking and Finance and Insurance.
Mischa has recently worked in business areas like Audit and Information Technology.
Mischa holds a Master in Financial Management Accounting and Control from Rotterdam School of Management, Erasmus University Rotterdam.
Mischa has 5 certificates. Among them, these include: PRINCE2 project management, Postdoctoral Registeraccountant programme (Certified Public Accounting), and CISA training.
Mischa will be available full-time from December 2026.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 20 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Henry H.
Peter K.
Federico L.
Christian F.
Dustin D.
Markus W.
Daniel J.
Christian D.
Michael S.
Maxim R.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Non-Financial Risk Officer
Remy M.
Karl-Heinz R.
Robert F.
Jens B.
Luca P.
Thomas M.
Markus M.
Daniel R.
Thomas U.
Achim K.
Nearby freelancers
Professionals working in or nearby Hückelhoven, Germany
Daniel O.
Gavrilo O.
Jessica D.
Yusuf C.
Alexander S.
Alexander F.
Mahmoud T.
Kamuran D.
Christian S.
Markus B.
