Roberto S.-Owner, Siegel Resilience · Consultant for Integrated Security & Resilience
Check rate
Experience
Requirements Management & Compliance for the Cyber Resilience Act (CRA)
Please inquire
Technology company
- Analysis of CRA requirements
- Management workshop
- Development of recommendations
Result: Prioritized CRA readiness plan for compliance.
Cybersecurity Risk Management & Security Strategy
Please inquire
Technology company
- Analysis of information security risks
- Risk interviews with specialists and senior management
- Adjustments to the risk management strategy
Result: Consolidated risk picture and refined RM strategy as a basis for management decisions.
Physical Security & Security Strategy
Please inquire
Network service provider (KRITIS)
- Establishment of security governance
- Site protection concepts
- Operational concepts for physical security
Result: Sustainable security organization established for KRITIS operations.
Security Analysis & Planning for Close Protection
Please inquire
Comprehensive Security Analysis & Advice to the Foundation's Management
Please inquire
German foundation
Information Security, Risk Management & Classified Information Security
Please ask
Defense industry
- Developed a training program and structured analysis in ISRM
- Strategic approaches to classified IT in line with classified information security requirements
- Prepared decision-making for the selection of a GRC platform
Result: A classified information security-compliant strategy and a well-founded platform decision.
Lead Consultant
Kineton
Information Security Strategy
- Analysis of the existing information security strategy
- Standards comparison: ISO 27001, TISAX, NIST
- Criticality quick check
Result: A prioritized strategy approach with standards alignment, prepared for management.
Layer-Based Security Strategy
Layer-Based Security Strategy
KRITIS
- Overall strategy for layer-based security management
- Planning according to ISO 223xx and Wirtschaftsgrundschutz, risk analysis according to ISO 31000
- Security zone planning; physical, technical, organizational, and personnel measures
- Advising senior management
Result: An overall security strategy ready for approval for one of the world's largest infrastructure projects.
Gap Analysis According to VdS 10000
Online retail
Layer-Based Security Strategy
Giga-Projekt
Layer-Based Security Strategy
KRITIS
- Overall strategy for layer-based security management
- Planning according to ISO 223xx and Wirtschaftsgrundschutz, risk analysis according to ISO 31000
- Security zone planning; physical, technical, organizational, and personnel measures
- Advising senior management
Result: An overall security strategy ready for approval for one of the world's largest infrastructure projects.
CISO
Agentur für Innovation in der Cybersicherheit GmbH des Bundes
- Introduced an ISMS based on BSI IT-Grundschutz (200er-Reihe), and BCM based on BSI 200-4
- Helped shape VS-IT; developed a site security concept including emissions and eavesdropping protection
- Advised executive management
Result: Built the security organization of a newly founded federal GmbH from the ground up.
Developed quality management based on ISO 9001 & a hybrid project model
Cyberagentur des Bundes
Overall responsibility for security management
“enhanced Forward Presence”
- Managed security for the overseas mission
- Reviewed security processes and measures
- Infrastructure up to classified security level
Result: Reviewed and strengthened mission security up to classified security level.
Reviewed data protection planning & TOM (DSGVO/BDSG)
Developed information security strategy
Printing company
OSINT corporate environment analysis (Lead)
Printing company
Crisis management / BCM requirements according to ISO 22301
Telecommunications
ISMS implementation according to ISO 27001 (Lead)
IT service provider
IS concept according to ISO 27001
IT service provider
Managing Director
IoT solutions for emergency and security management
- IoT product strategy for security management
- Organizational and technical emergency processes
- Architecture, including security architecture; requirements and service management
Result: Responsible for the security management IoT product line, from strategy through to architecture.
Managing Director
Dussmann Group
IoT Solutions for Emergency & Security Management
- IoT product strategy for security management
- Organizational and technical emergency processes
- Architecture, including security architecture; requirements and service management
Result: Responsible for the security management IoT product line, from strategy through to architecture.
Building a Security Organization Across Multiple Sites
Dussmann Group
Implementation of BCM according to ISO 22301 (Lead)
Dussmann Group
Integrated Security Concept
Shipyard
Integrated Security Concept
Shipyard
Video Surveillance Concept
Shopping mall
BCM implementation according to ISO 22301 (Lead)
Dussmann Group
Holistic Risk Analysis (Lead)
Dussmann Group
Internal QM ISO 9001 Auditor
International audits in 9 countries
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Aerospace and Defense, Retail, Government and Administration, Manufacturing, and Professional Services.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Strategy, Quality Assurance, Project Management, Product Development, and Legal.
Summary
Roberto Siegel combines military leadership experience with deep expertise in information security and physical security. His career has taken him from an officer in military intelligence to Head of International Security at a services group, managing director of an IT start-up and two consulting firms, and leadership roles as CISO of the Federal Agency for Innovation in Cybersecurity and Head of Defense and Security. He knows the full range — from classified information protection and ISMS development to site security for major international projects. With Perimea, he has turned this approach into his own assessment platform. As a reserve officer, he works in security management at the Cyber and Information Domain Command; as a lecturer, he taught cyber and information security at Steinbeis University.
Skills
Consulting Areas
- Physical Security & Zone Models: Site Protection, Security Zones, Structural, Technical And Organizational Measures.
- Nis2, Cra & Kritis: Readiness Assessments, Governance And Implementation Plans For Operators And Suppliers.
- Bcm & Crisis Management: Iso 22301, Bsi 200-4 — Bia, Emergency And Crisis Organization, Exercises.
- Isms & Risk Management: Iso 27001/27005, Bsi It-Grundschutz, Vds 10000 — From Setup To Audit Readiness.
- Hybrid Threat Assessments: Situational Assessments Of Physical, Digital And Information Risks; Osint.
- Classified Information Protection & Vs-It: SÜG, Vsa, Emissions And Eavesdropping Protection, Sensitive Security Projects.
Skills Profile
- (It) Risk Management — Iso 31000, Iso 27005, Bsi 200-3 — > 15 Yrs.
- Information Security — Bsi It-Grundschutz, Iso 27001/27002, Vds 10000 — 5–15 Yrs.
- Regulations & Compliance — Nis2, Cra, Kritis-Dachgesetz, Tisax, Dsgvo — < 5 Yrs.
- Business Continuity Management — Iso 22301, Iso 22313, Bsi 200-4 — > 15 Yrs.
- Crisis Management — Iso 22361, Wirtschaftsgrundschutz — > 15 Yrs.
- Classified Information Protection / Opsec — SÜG, Vsa, Bsi Technical Guidelines — > 15 Yrs.
- Physical Security — Site And Infrastructure Security — > 15 Yrs.
- Security Management — Strategies And Security Culture — > 15 Yrs.
- Project Management (Traditional/Agile) — > 15 Yrs.
- Quality Management — Iso 9001 — 5–15 Yrs.
- Grc Platforms — Qsec, Verinice, Hiscout — 5–15 Yrs.
Industry Knowledge
- German Armed Forces / Public Administration — > 15 Yrs.
- Critical Infrastructure (Kritis) — < 5 Yrs.
- Defense Industry — < 5 Yrs.
- Facility Management — 5–15 Yrs.
- It Service Providers And Development — 5–15 Yrs.
- Management Consulting — 5–15 Yrs.
- Telecommunications — < 5 Yrs.
- Logistics And Transport — < 5 Yrs.
- Research And Teaching (Lecturer) — < 5 Yrs.
Languages
Education
HWR Berlin
Master of Arts · Security Management
AKAD Leipzig
Diplomkaufmann · Business Administration
Certifications & licenses
Anti Terrorism Officer
BCM-Academy
Certified IT Service Continuity Manager
BCM-Academy
Vorfallpraktiker BSI
HwK Chemnitz
Cybersecurity Practitioner
ISACA
TÜV Nord
TÜV Nord
Hochschulzertifikat IT-GRC „Recht“
OCC Cybersecurity
Hochschulzertifikat IT-GRC „Technologie“
OCC Cybersecurity
Business Continuity Management
BdSI
Krisenmanagement
Akademie für Krisenmanagement
Security Engineer
BdSI
BSI IT-Grundschutz
ISO 22301
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Roberto is based in Rosenthal-Bielatal, Germany and can operate in on-site, hybrid, and remote work models.
Roberto speaks the following languages: German (Native), English (Advanced).
Roberto has at least 15 years of experience. During this time, Roberto has worked in at least 26 different roles and for 7 different companies. The average length of individual experience is 1 year and 6 months. Note that Roberto may not have shared all experience and actually has more experience.
Based on recent experience, Roberto would be well-suited for roles such as: Requirements Management & Compliance for the Cyber Resilience Act (CRA), Cybersecurity Risk Management & Security Strategy, Physical Security & Security Strategy.
Roberto's most recent position is Requirements Management & Compliance for the Cyber Resilience Act (CRA) at Please inquire.
In recent years, Roberto has worked for Please inquire, Please ask, Kineton, Giga-Projekt, and Agentur für Innovation in der Cybersicherheit GmbH des Bundes.
Roberto is most experienced in industries like Information Technology, Government and Administration, and Aerospace and Defense. Roberto also has some experience in Retail, Manufacturing, and Professional Services.
Roberto is most experienced in business areas like Information Technology, Strategy, and Quality Assurance. Roberto also has some experience in Product Development, Project Management, and Legal.
Roberto has recently worked in industries like Information Technology, Government and Administration, and Professional Services.
Roberto has recently worked in business areas like Information Technology, Project Management, and Quality Assurance.
Roberto attended HWR Berlin for Security Management.
Roberto has 14 certificates. Among them, these include: Anti Terrorism Officer, Certified IT Service Continuity Manager, and Vorfallpraktiker BSI.
Roberto is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 28 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Federico L.
Alexander S.
Daniel J.
Christian F.
Peter D.
Christian D.
Peter K.
Bernhard B.
Michael S.
Frank J.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Requirements Management & Compliance for the Cyber Resilience Act (CRA)
Matthias K.
Sebastián Z.
Manfred P.
Zoran J.
Alfred M.
Mira M.
Julian V.
Gabriele B.
Alexander P.
Rallis T.
Nearby freelancers
Professionals working in or nearby Rosenthal-Bielatal, Germany
Martin S.
Katharina S.
Christel Kristin R.
Emilian N.
Anne D.
Jon A.
Waleed B.
Tom W.
Khaled M.
Kuldeep G.
