Skip to main content
Top expert badge
Recommended expert
Profile header background

Stefan R.-Information Security Consultant | ISMS · ISO 27001 · KRITIS · DORA/NIS-2

Stefan R. - Information Security Consultant | ISMS · ISO 27001 · KRITIS · DORA/NIS-2 - profile avatar
Profile header overlay
Würselen, Germany

Check rate

Experience

Jan 2025 - Present
Cologne, Germany

Information Security Consultant

TÜV TRUST IT GmbH

Position summary
Information Security Consultant at TÜV TRUST IT GmbH
Industries
Banking and Finance
Information Technology
Transportation
Utilities
Business areas
Audit
Information Technology
  • Conducting information classification, risk management and supplier assessment workshops
  • Introduction of a customer-specific information security minimum standard (based on TISAX and ISO 27001) since Apr. 2026; implementing the same standard in parallel for a second customer
  • Building an ISMS according to ISO 27001 for a logistics company (approx. 160–200 MA)
  • Municipal utility company (KRITIS, approx. 450 MA): independently introduced the CRISAM GRC tool and am currently expanding it to include NIS-2 areas, took over parts of the ISB support mandate, and followed up on and remediated audit findings
  • Supporting customers in implementing DORA and NIS-2, including documentation for a financial institution
  • Conducting and supporting audits of systems for attack detection (SzA) according to § 8a BSIG (today §§ 31, 39 BSIG)
  • Creating network structure plans according to IT-SiKat
  • Creating technical security concepts (logging, IAM, attack detection)
Jan 2024 - Dec 2024
Cologne, Germany

IT-Security Consultant – Security Architecture / Incident Response

TÜV TRUST IT GmbH

Position summary
IT-Security Consultant – Security Architecture / Incident Response at TÜV TRUST IT GmbH
Industries
Professional Services
Business areas
Information Technology
  • Digital forensics in 4 projects for customers with 1,000–2,000 employees, ranging from Windows event log analysis to the complete investigation of a server environment (approx. 60 TB) following a ransomware incident; legally admissible documentation
  • Developing and reviewing security architectures for corporate customers, including Azure cloud environments
  • Creating technical security concepts for logging, IAM and systems for attack detection
  • Supporting SzA assessments according to BSI requirements

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Banking and Finance, Information Technology, Transportation, Utilities, and Professional Services.

Banking and Finance
Information Technology
Transportation
Utilities
Professional Services
Profile match chart

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology and Audit.

Information Technology
Audit
Profile match chart

Summary

As an Information Security Consultant, for nearly three years I have supported around 15 regulated companies in the energy, financial, healthcare and logistics sectors, with between 180 and over 7,000 employees. I build and further develop information security management systems according to ISO 27001, lead workshops on risk management, information classification and supplier assessment, and support companies in implementing NIS-2, DORA and KRITIS requirements.

I also bring a technical background in Security Architecture, Azure and digital forensics, including the investigation of ransomware incidents, the development of security concepts and audits of systems for attack detection. I am certified as an ISMS-Manager, ISMS-Auditor and ISMS-Risikomanager, as well as an SSCP, Azure Security Engineer Associate and Certified OT Security Practitioner.

Skills

  • Isms & Audit: Iso 27001/27002, Iso 27006/27007, Isms Implementation, Information Classification, Sza Audits (§ 8a Bsig), Audit Follow-Up
  • Risk & Grc: Risk Management (Bsi All-Hazards Approach), Supplier Assessment, Dora, Nis-2, Bsi It-Grundschutz, Grc Tools (Crisam, R2c)
  • Cloud & Architecture: Microsoft Azure, Iam, Zero Trust, Logging, Technical Security Concepts
  • Dfir: Windows Forensics (Mft, Registry, Eventlogs), Memory Forensics (Volatility, Memprocfs), Network Forensics (Wireshark, Networkminer), Azure/Cloud Forensics, Ioc Analysis (Loki, Virustotal)
  • It-Security
  • Dfir-Labs

Languages

German
Native
English
Advanced

Education

Oct 2019 - Nov 2023

FH Aachen University of Applied Sciences

Bachelor of Science · Computer Science · Aachen, Germany

Certifications & licenses

ISMS-Risikomanager

TÜV TRUST IT

Certified OT Security Practitioner (IEC 62443)

TÜV Austria

ISMS-Auditor

TÜV TRUST IT

ISMS-Manager

TÜV TRUST IT

Systems Security Certified Practitioner (SSCP)

ISC2

Statistics

Experience

Total positions 2
Experience in Banking and Finance 2 y
Avg length 1 y 4 m
Longest experience 1 y 9 m

Global experience

Countries worked in 1 (Germany)
Primary country Germany

Expertise

Recent roles Information Security Consultant, IT-Security Consultant – Security Architecture / Incident Response
Main industries Banking and Finance, Information Technology, Transportation
Main business areas Information Technology, Audit

Qualifications

Highest degree Bachelor
Certifications earned 6
Member since
Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Frequently asked questions

Have questions? Find more information here.

Stefan is based in Würselen, Germany and can operate in on-site, hybrid, and remote work models.

Stefan speaks the following languages: German (Native), English (Advanced).

Stefan has at least 3 years of experience. During this time, Stefan has worked in at least 2 different roles and for 1 company. The average length of individual experience is 1 year and 5 months. Note that Stefan may not have shared all experience and actually has more experience.

Based on recent experience, Stefan would be well-suited for roles such as: Information Security Consultant, IT-Security Consultant – Security Architecture / Incident Response.

Stefan's most recent position is Information Security Consultant at TÜV TRUST IT GmbH.

In recent years, Stefan has worked for TÜV TRUST IT GmbH.

Stefan is most experienced in industries like Banking and Finance, Information Technology, and Transportation. Stefan also has some experience in Utilities and Professional Services.

Stefan is most experienced in business areas like Information Technology and Audit.

Stefan holds a Bachelor in Computer Science from FH Aachen University of Applied Sciences.

Stefan has 6 certificates. Among them, these include: ISMS-Risikomanager, Certified OT Security Practitioner (IEC 62443), and ISMS-Auditor.

Stefan will be available full-time from November 2026.

Daily rate distribution

0% 25% 50% 75% 100%
40% of experts charge less than €800 per day.
20% of experts charge between €800 and €960 per day.
20% of experts charge between €960 and €1120 per day.
10% of experts charge between €1120 and €1280 per day.
10% of experts charge €1600 or more per day.
<€800 €800-​960 €960-​1120 €1120-​1280 €1600+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1000
750
500
250
Rate comparison chart
Daily rate avg. 872 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1000
750
500
250
Rate comparison chart
Median rate 840 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 23 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.