Peter W.-Program and Project Manager / Internal Auditor / CISO
Check rate
Experience
ISO 27001 Auditor for Health Insurance Archive System
Health Insurance Company
Replacement of the existing host-based archive system (document management system – DMS) is well underway.
The internal audit is intended to ensure the organization’s quality standards.
GDPR
ISO 27001 ff.
BSI
DORA
Patient data regulations
Host / Cloud / S3 / Container / Highly scalable / Nuxeo
Budget: 50.000
Team: 1
Public Sector – Public European Tender N-Bank
NBank
NBank is required to meet the increased regulatory challenges.
Various new solutions are being introduced as part of the data center renewal. The tender for a DDoS security solution is one of them.
In addition to implementing attack protection, the project must account for building a second data center and the complexity of regulatory requirements for a European tender.
NIS2
GDPR
KRITIS
ISO 27001 ff.
BSI
RACI model
DORA
DDoS in accordance with BSI requirements
Budget: 50.000
Team: 1
Finance – Compliance / Strategy Consulting / Enterprise Architecture Implementation / DORA / Data Protection / Lead Architect
LBS Süd
Following the merger of LBS-Süd-West and LBS Bayern, the requirements for KRITIS (critical infrastructure) / DORA in the financial sector must now be met.
The merger is under time pressure due to upcoming audits. Existing structures / documents are now being combined, and Enterprise Architecture is being established in this context.
Consolidation of ICT Enterprise Architecture
Implementation of AI-supported input management
Implementation of AI-supported information services
Implementation of new network infrastructure (IaC principle)
Implementation of AI-supported voice assistance
Implementation of DWH & regulatory reporting
Harmonization of the companies’ document management systems (DMS)
Security management system
Windows 11 hardening
Policy updates
Process design
ARC42 (ArchiMate), modeling end-to-end processes in line with compliance requirements
Implementation of automated controls
Design of standard UAT processes
AI support for process optimization
Implementation of Azure Cloud for: Governance SLA Management / IAM / Security (Firewalls / WAF / PGP / Documentation & Processes) / Workplace (Win 11) / Field Service / Exchange (Mail / Users and Roles) Voice (Teams & FAX) / Print / SAP / UHD
GDPR
KRITIS
ISO 27001 ff.
BSI
Banking regulations
DORA
BSI IT-Grundschutz Compendium
ARC42
Multi-cloud environment (Azure / AWS / Private Cloud / OnPrem)
DMS - DOXIS
Microsoft Azure Cloud
SharePoint
Budget: 250.000 / 500.000
Team: 3 / 10
Public Sector – Public European Tender ITV Stormarn
ITV Stormarn
Preparation of tender documents for the public sector in a KRITIS environment.
CMDB
Infrastructure firewall
MSSQL migration
Key management implementation
Document management system
SIEM
GDPR
KRITIS
ISO 27001 ff.
BSI
Tender portal
Budget: 50.000
Team: 1
Public Sector – Strategy Consulting for Network / BSI / NIS2 Healthcare
HBSN / Medical Service Bavaria
Requirements for the Medical Service Bavaria have increased significantly due to topics such as electronic patient records, e-prescriptions, and more.
Growing dependence on service providers and their services requires existing processes and access strategies to be revised using a multi-cloud approach.
Developing a strategy for Single Sign On / Onboarding / RBAC for service providers, taking increased monitoring requirements into account.
Strategy affected by new legislation and time pressure caused by delayed approvals.
Long-standing implementations with limited scalability.
NIS2 requirements for infrastructure and processes.
Extended BSI IT-Grundschutz.
Active Directory (user and role model / IAM)
Monitoring (review of the current solution)
Cisco upgrade (test plan - release planning and rollout at 30 locations)
Firewall concept
Onboarding external employees (BPMN)
NIS2
GDPR
KRITIS
ISO 27001 ff.
BSI
RACI model
CISCO
Active Directory
Fortinet Firewall
Budget: 50.000
Team: 1
Finance – Compliance - Multi-Project Management Migration DWH – KRITIS – ISO 27001 Multi Cloud
ING-Diba
Responsibility for complying with and implementing regulatory requirements.
Served as IT Custodian for applications, supporting the implementation and compliance of risk management and governance processes.
Derived risk requirements from Bafin BAIT requirements and formulated risk processes.
Sustainable risk reporting.
Topics such as SOX.
Presented applications to the relevant risk departments.
Point of contact for Second Line, IT Security, and Governance.
Developed relevant security features for applications.
Coordinated with IT architects on the required architecture for each application.
Prepared documentation.
Modeled end-to-end processes in line with compliance requirements.
Introduced automated controls.
Designed standard UAT processes.
Improved processes based on IPE compliance.
Strengthened IT General Controls (ITGC) and business controls.
Systems developed over more than 30 years need to be moved to a private cloud.
The Data Lake is at the heart of the bank’s operations, as all regulatory requirements are handled through it.
Over 70 source systems and over 50 receiving systems.
Complex data processing in the Data Lake.
NIS2
GDPR
KYC
KRITIS
ISO 27001 ff.
BSI
EIOPA
SOX
Exadata (Oracle)
Business Objects
Cognos
Cloud Pack for Data (CP4D) (IBM)
Information Server
Data Lineage
Data Quality
Automic
Metadata Repository
Budget: 20.000.000
Team: 50
Trading – Product Owner - E-commerce Store Launch – Multi Cloud – SAP - Payment System
Hornbach
Opened the marketplace to third-party vendors.
Maintained existing ERP systems and created new ERP systems for third-party vendors.
Ensured consistency in order management.
Shifted the IT landscape to an Event Driven Design approach.
Introduced new payment processes and billing for mixed orders.
Managed 9 Scrum teams to catch up on delays.
Scrum
NIS2
GDPR
KYC
Mirakel
SAP 4 Retail
SAP Cloud
Google Cloud
KAFKA
ASAPIO
NIFI
PayPal Hyperwallet (ESCROW)
Budget: 600.000
Team: 81
Finance – Compliance - Enterprise Architect – Kubernetes / Openshift
Debeka
Adapted the current infrastructure and introduced a container solution based on OpenShift.
Reformed the process landscape and software management.
Managed various service providers during the transition of key business systems.
Scrum
KRITIS
ISO 27001 ff.
BSI
EIOPA
MARisk
BAFIN
Kubernetes
Azure-AD
Azure B2C
Network
Budget: 120.000
Team: 18
Public Sector – Enterprise Architecture – Multi Cloud – Containers
HZD (Hessische Zentrale für Datenverarbeitung)
IT service provider for the State of Hesse, serving the police, judiciary, tax offices, and public administrations.
Supported the federal initiative to provide cloud services across organizations.
Provided architectural support for Azure topics and on-premise systems
Azure AD login (including B2C)
DESTATIS (Federal Ministry of Statistics)
SchwebNet disability benefits application system
Introduced HöMS (Hessische Hochschule für öffentliches Management und Sicherheit)
Export permits for medical devices
Aerial image analysis for unexploded ordnance
Security portal
FIDO2 implementation
Code signing
SKAT (radiation protection register)
Wine-growing register
Dike register
Robotic Process Automation (RPA)
Housing benefit, OSCI, Ekom21, Moodle, address services, aviation security, accreditation database
Implemented a service provider model based on the hyperscaler approach.
Strong dependencies on measures across federal states.
Waterfall / Togaf / V-Model / Kanban
KRITIS
ISO 27001 ff.
BSI
EIOPA
MARisk
GDPR
Linux
Kubernetes
Azure-AD
Azure B2C
Hadoop
Cloudera
Network
ADOit
EAM
Nextcloud
Alfresco
Budget: 400.000
Team: 8
Finance – Scrum Master – Credit Assessment
VW-Financial Services
Combined agile approaches with existing waterfall structures.
Applied pragmatic methods outside SAFe 4.x.
Modeled end-to-end processes in line with compliance requirements.
Introduced automated controls.
Designed standard UAT processes.
Improved processes based on IPE compliance.
Strengthened IT General Controls (ITGC) and business controls.
Managed stakeholder expectations in the credit services area.
Scrum
KRITIS
ISO 21001 ff.
BSI
EIOPA
MARisk
BAFIN
GDPR
Kubernetes
Java
Quarkus
Budget: 400.000
Team: 8
Finance – Program Manager – Monitoring – Container – KYC - Security
ING
Established a near-time solution for fraud detection and customer tracking using Flink / Cassandra (NoSQL) on OpenShift.
Managed the objectives of 4 Scrum teams.
Ran the Hadoop cluster in parallel during the rollout of the new solution.
Introduced DevOps based on Ansible / GIT.
Reviewed the use of Terraform.
Redesigned firewall rules for domain segmentation and load balancing with F5.
Supported the migration of over 400 VMs to SCS (Self Contained Services).
Assessed the switch from direct-attached storage to Ceph.
Defined new roles for the CMDB.
Introduced a data model compliant with GDPR (BDSG) for the banking app to strengthen IT General Controls (ITGC) and business controls.
Scrum
Kubernetes
OpenShift
Cassandra
Flink
Kafka
Jupyter Notebook
S3
ELK
Azure
IaaS
PaaS
SaaS
MicroServices
Self Contained Services (SCS)
CyberArk
Keycloak
Budget: 1.000.000
Team: 6
Finance – Architect – IoT - Container - Multi Cloud
Siemens Building Services
Adapted the architecture to new requirements in the IoT sector based on AWS.
Met Siemens AG's international requirements in the Building Services area.
Adapted the current solution to a microservice architecture.
Set up Continuous Delivery.
SAFe 6
AWS
Kubernetes
MSSQL
Web Services
JAZZ
Budget: 1.000.000
Team: 14
Finance – Product Owner – Security - Container
ING Diba
Set up a suitable message bus (Kafka) and a way to monitor log events (ELK-Stack).
Separated business events from log events.
Made the strategic decision to use OpenShift on Bare Metal / ELK as a container solution.
Implemented fully automated provisioning.
Implemented a metadata model for logging to strengthen IT General Controls (ITGC) and business controls.
Addressed high requirements for scalability, transaction security, and regulatory compliance.
Scrum
KAFKA
ELK Stack
Kubernetes
Openshift
Docker
Kibana
IaaS
PaaS
SaaS
CyberArk
Budget: 2.100.000
Team: 5
Finance – Security Architecture – Compliance - Kubernetes / Openshift
NORD/LB
Identified changes in governance and compliance for a cloud strategy.
Analyzed affected stakeholders and communicated cloud capabilities in a hybrid cloud model.
Hybrid cloud approach with different service offerings.
Built a second cloud infrastructure in parallel.
Scrum
KRITIS
ISO 27001 ff.
BSI
EIOPA
MARisk
Kubernetes
Fluend
S3
ELK
Azure
SCS
IaaS
PaaS
SaaS
Hashi Corp
ARCSight
NGINX+
Gardener
JFrog
Ansible
X-RAY
Prometheus
Loki
MongoDB
Lightbit
PostgreSQL
GIT
CyberArk
Lecturer (Compliance)
SHEER GmbH
- DORA – An Introduction
- Security policies - How to write a security policy
- NIS2 – An overview of the requirements
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Banking and Finance, Government and Administration, Information Technology, Insurance, Retail, and Construction.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Finance, Product Development, Legal, and Audit.
Summary
Over 30 years of experience delivering complex IT solutions in an international environment as a Program and Project Manager. For the last 10 years, working as an internal auditor / CISO under ISO 27001 ff., KRITIS, DORA, NIS2, BSI IT-Grundschutz, ESG reporting, EU Data Act, compliance, reporting, and data protection. My approach: Let’s get started and pragmatically find solutions by consensus. I will support you with detailed, tried-and-tested templates.
Skills
- Security Policies (Standards) According To Bsi It-Grundschutz Since 2015
- Implementation Of Information Security Management Systems According To Iso 27001
- Business Analyst With More Than 10 Years Of Experience, Including Processes
- Auditor (Iso 27001)
- Organizational Structure Development
- Ciso (Iso 27001)
- Ai (Eu Ai Act) Since 2024
- Bsi It-Grundschutz
- Gdpr Since 2016 / Marisk Since 2016 / Bait Since 2015 / Cloud Since 2015
- Agile Product Owner & Scrum
- Project Management Using Agile And Traditional Methods Since 2000
- Security Architect For Multi-Cloud Solutions Since 2015
- Migration / Implementation Of Solutions For > 100,000 Workstations Since 2000
- Regulatory Requirements > 9 Years
- International Assignments In Asia / India / Eu / Switzerland / Usa Since 2000
- Itil
- “Political Correctness”
- Finance > 25 Years
- Security / Infrastructure / Aws / Azure Architect
Languages
Education
Banking Specialist (higher education qualification) · Banking Specialist
Certifications & licenses
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Peter is based in Frankfurt am Main, Germany.
Peter speaks the following languages: German (Advanced), English (Advanced).
Peter has at least 7 years of experience. During this time, Peter has worked in at least 13 different roles and for 13 different companies. The average length of individual experience is 1 year and 6 months. Note that Peter may not have shared all experience and actually has more experience.
Based on recent experience, Peter would be well-suited for roles such as: ISO 27001 Auditor for Health Insurance Archive System, Public Sector – Public European Tender N-Bank, Finance – Compliance / Strategy Consulting / Enterprise Architecture Implementation / DORA / Data Protection / Lead Architect.
Peter's most recent position is ISO 27001 Auditor for Health Insurance Archive System at Health Insurance Company.
In recent years, Peter has worked for Health Insurance Company, NBank, LBS Süd, ITV Stormarn, and HBSN / Medical Service Bavaria.
Peter is most experienced in industries like Banking and Finance, Government and Administration, and Information Technology. Peter also has some experience in Retail, Insurance, and Construction.
Peter is most experienced in business areas like Information Technology, Project Management, and Finance. Peter also has some experience in Product Development, Legal, and Audit.
Peter has recently worked in industries like Banking and Finance, Government and Administration, and Retail.
Peter has recently worked in business areas like Information Technology, Project Management, and Finance.
Peter attended education in Banking Specialist.
Peter has 3 certificates. These include: EU AI Act, ISO 27001 Auditor, and ISO 27001 CISO.
Peter will be available full-time from March 2027.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 6 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Bernhard B.
Federico L.
Pierre G.
Frank J.
Daniel J.
Karl-Heinz R.
Robert F.
Luca P.
Christian D.
Firas J.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a ISO 27001 Auditor for Health Insurance Archive System
Björn B.
Henry H.
Nikolaus B.
Christian F.
Peter K.
Alexander S.
Dustin D.
Najat D.
Michael F.
Andreas I.
Nearby freelancers
Professionals working in or nearby Frankfurt am Main, Germany
Anand R.
Florian R.
Olaf S.
Lukas F.
Christopher Z.
Eduard V.
Erkan Y.
Patrick L.
Kossi A.
Joachim A.
