Robert Vattig-Freelance Consultant Information Security and Business Continuity
Check rate
Experience
Freelance Consultant Information Security and Business Continuity
Freelance business consulting
- Provide consulting services nationwide in both private and public sectors
- Advise on information security management systems, IT-Grundschutz, KRITIS compliance, TISAX, business continuity and crisis management
- Support the introduction of policies, risk management methods, asset registers and supplier management
- Conduct internal audits, training workshops and support audit preparations
Senior Consultant Information Security, Quality and Business Continuity
One of the largest IT service providers in Europe
- Conducted risk, security and IT emergency assessments of diverse technologies for individual IT services and complete infrastructures of various companies
- Audited and designed security for proprietary and standard software, including databases, operating systems, enterprise service bus, middleware, networks, web applications, cloud computing, IoT use cases, SAP, BI, MDM, SharePoint
- Gained over 14 years of experience in auditing and building management systems according to ISO 27001, ISO 22301, IT-Grundschutz and other standards
- Led projects responsible for creating policies, introducing risk management methods according to ISO 27001, ISO 27005 & ISO 31000, awareness measures, internal audits and support for initial, re-certification and surveillance audits
Industry Experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology and Professional Services.
Business Area Experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Quality Assurance, Audit, and Operations.
Summary
I have been working as a Senior Consultant in the areas of Information Security, Quality and Business Continuity since 2011 for one of the largest IT service providers in Europe. During this time, I carried out risk, security and IT emergency reviews for a wide range of technologies, both for individual IT services and for complete infrastructures of different companies. I have audited and designed security for a wide range of proprietary and standard software, e.g. DB, OS, enterprise service bus, middleware, networks, web applications, cloud computing, IoT use cases, SAP, BI, MDM, SharePoint, etc.
Over 14 years of experience were gained here in auditing and building management systems according to ISO 27001, ISO 22301, IT-Grundschutz and other standards. As project lead, responsible for creating policies, introducing risk management methods according to ISO 27001, ISO 27005 & ISO 31000, awareness measures, internal audits and support during initial, re-certification and surveillance audits.
Since mid-2020, I have been working as a freelance business consultant nationwide in both the private and public sectors.
Skills
Core Areas Of Expertise
- Information Security Management System (Iso 27001)
- It-Grundschutz (Bsi Standards 200-1 To 200-3 And 200-4)
- It Security Catalog According To Section 11, Paragraph 1a Enwg (08/2015)
- Trusted Information Security Assessment Exchange (Tisax)
- Business Continuity & Crisis Management (Iso 22301, Bci Gpg)
- It-Service Management System (Iso 20000)
- Quality Management System (Iso 9001)
- Risk Analyses (Iso 27001, Iso 27005, Iso 31000, Ms Stride)
- Security, Authorization And Data Protection Concepts For Various It Services
- Project Management
Methodical Competencies
- Risk Analyses (Iso 31000, Iso 27005, Cramm, Marisk, Ms Stride, Nist)
- Business Impact Analyses (Iso 22301, Iso 22317, Bsi 200-4 And Bci Gpg)
- Scoping And Asset Management (Iso 27003, Iso 27005, Cmdb)
- Creation Of Policies, Procedures & Security Concepts
- It Security Concepts (Segregation, Segmentation, Cia, Layered Security, Etc.)
- Audits According To Iso 19011, Awareness Measures & Presentations
- Workshop Facilitation & Project Management (Traditional And Agile, E.G. Scrum)
- It-Grundschutz (Bsi Standards 200-1 To 200-3 And 200-4)
- It Service Management & Governance (Iso 20000, Itil, Spice, Cobit, Coso)
- Quality Management (Iso 9001 And Iso/Ts 16949)
- Data Protection Management (Bdsg, Gdpr)
- Kritis: B3s, Oha Sza, Concretization Of Bsi §8a
- Current Regulations: Dora, Nis2, Ai Act, Cra, Kritis
Technological Competencies
- Hardening, Patch & Vulnerability Management, Network Security
- Cloud Computing, Big Data, Business Intelligence
- Sap Security & Compliance
- Iot & Iiot, Industrial Security, Industry 4.0
- Web Technologies
- Cryptographic Technologies
- Authorization Management
- Test Data Anonymization
- Software Development Processes, E.G. Waterfall, Scrum
- Standard Software, E.G. Ms Sharepoint, Apache Http Server, Etc.
- Programming Languages (C, C++, C+, Java, Vb, Html)
- Security Services, E.G. Siem, Soc, Etc.
Tools
- Microsoft Office Incl. Vb And Open Office
- Ms Project
- Verinice, Docsetminder
- Document Management Systems, E.G. Sharepoint
- Jira, Confluence
- Task Management Tools, Ticket Tools
- Bizagi Bpmn Modeler, Aris
Social Skills
- Communication Skills - Conveying Complex Topics
- Problem-Solving Skills
- Resilience
- Analytical Mindset
- Teamwork Skills
- Self-Management & Sense Of Responsibility
Languages
Education
Master of Science, Graduate Computer Scientist · Computer Science
Certifications & licenses
Additional Verification Procedure Competence § 8a (3) BSIG
Crisis Management Essentials
First Aider Refresher Training
Emotional Leadership Practitioner
German Red Cross First Aid Course
Successfully Planning, Designing and Delivering (IT) Training Courses
Internal Auditor Training
Auditor ISO 20000
Internal Auditor Training
Experience Workshop for Auditors
Implementation Course ISO/IEC 27001:2005
"Classified Information - For Official Use Only" (VS-NfD)
Statistics
Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Daily Rate Distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar Freelancers
Discover other experts with similar qualifications and experience
Alexander Sänn
Federico Leefhelm
Björn Bausch
Markus Willems
Maxim Ribakowski
Lucas Löcken
Nikolaus Betzler
Thomas Kupfer
Stephan Selnerat
Matthias Steinmann
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Freelance Consultant Information Security and Business Continuity
Sandra Klinkenberg
Volkmar Jaekel
Fabian Flock
Michael Schwendemann
Christian Heutger
Christian Decker
Volker Jung
Henryk Orantek
Thomas Ullrich
Jörg Iffländer
Nearby freelancers
Professionals working in or nearby Lauta, Germany
Fred Schröder
Niklas Grieger
Christian Liberty Marshall
Hanna Winkelmann
Julian Voje
Marina Kuharic
Doaa Abdelghafar
Alfred Marx
Mimmo Nocera
Tobias Waggoner
Most recent projects
FRATCH works with many companies and recruitment agencies. Here you will find our recently posted projects and opportunities.
