Stefan R.-Information Security Consultant | ISMS · ISO 27001 · KRITIS · DORA/NIS-2

Check rate
Experience
Information Security Consultant
TÜV TRUST IT GmbH
- Conducting information classification, risk management and supplier assessment workshops
- Introduction of a customer-specific information security minimum standard (based on TISAX and ISO 27001) since Apr. 2026; implementing the same standard in parallel for a second customer
- Building an ISMS according to ISO 27001 for a logistics company (approx. 160–200 MA)
- Municipal utility company (KRITIS, approx. 450 MA): independently introduced the CRISAM GRC tool and am currently expanding it to include NIS-2 areas, took over parts of the ISB support mandate, and followed up on and remediated audit findings
- Supporting customers in implementing DORA and NIS-2, including documentation for a financial institution
- Conducting and supporting audits of systems for attack detection (SzA) according to § 8a BSIG (today §§ 31, 39 BSIG)
- Creating network structure plans according to IT-SiKat
- Creating technical security concepts (logging, IAM, attack detection)
IT-Security Consultant – Security Architecture / Incident Response
TÜV TRUST IT GmbH
- Digital forensics in 4 projects for customers with 1,000–2,000 employees, ranging from Windows event log analysis to the complete investigation of a server environment (approx. 60 TB) following a ransomware incident; legally admissible documentation
- Developing and reviewing security architectures for corporate customers, including Azure cloud environments
- Creating technical security concepts for logging, IAM and systems for attack detection
- Supporting SzA assessments according to BSI requirements
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Banking and Finance, Information Technology, Transportation, Utilities, and Professional Services.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology and Audit.
Summary
As an Information Security Consultant, for nearly three years I have supported around 15 regulated companies in the energy, financial, healthcare and logistics sectors, with between 180 and over 7,000 employees. I build and further develop information security management systems according to ISO 27001, lead workshops on risk management, information classification and supplier assessment, and support companies in implementing NIS-2, DORA and KRITIS requirements.
I also bring a technical background in Security Architecture, Azure and digital forensics, including the investigation of ransomware incidents, the development of security concepts and audits of systems for attack detection. I am certified as an ISMS-Manager, ISMS-Auditor and ISMS-Risikomanager, as well as an SSCP, Azure Security Engineer Associate and Certified OT Security Practitioner.
Skills
- Isms & Audit: Iso 27001/27002, Iso 27006/27007, Isms Implementation, Information Classification, Sza Audits (§ 8a Bsig), Audit Follow-Up
- Risk & Grc: Risk Management (Bsi All-Hazards Approach), Supplier Assessment, Dora, Nis-2, Bsi It-Grundschutz, Grc Tools (Crisam, R2c)
- Cloud & Architecture: Microsoft Azure, Iam, Zero Trust, Logging, Technical Security Concepts
- Dfir: Windows Forensics (Mft, Registry, Eventlogs), Memory Forensics (Volatility, Memprocfs), Network Forensics (Wireshark, Networkminer), Azure/Cloud Forensics, Ioc Analysis (Loki, Virustotal)
- It-Security
- Dfir-Labs
Languages
Education
FH Aachen University of Applied Sciences
Bachelor of Science · Computer Science · Aachen, Germany
Certifications & licenses
ISMS-Risikomanager
TÜV TRUST IT
Certified OT Security Practitioner (IEC 62443)
TÜV Austria
ISMS-Auditor
TÜV TRUST IT
ISMS-Manager
TÜV TRUST IT
Systems Security Certified Practitioner (SSCP)
ISC2
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Stefan is based in Würselen, Germany and can operate in on-site, hybrid, and remote work models.
Stefan speaks the following languages: German (Native), English (Advanced).
Stefan has at least 3 years of experience. During this time, Stefan has worked in at least 2 different roles and for 1 company. The average length of individual experience is 1 year and 5 months. Note that Stefan may not have shared all experience and actually has more experience.
Based on recent experience, Stefan would be well-suited for roles such as: Information Security Consultant, IT-Security Consultant – Security Architecture / Incident Response.
Stefan's most recent position is Information Security Consultant at TÜV TRUST IT GmbH.
In recent years, Stefan has worked for TÜV TRUST IT GmbH.
Stefan is most experienced in industries like Banking and Finance, Information Technology, and Transportation. Stefan also has some experience in Utilities and Professional Services.
Stefan is most experienced in business areas like Information Technology and Audit.
Stefan holds a Bachelor in Computer Science from FH Aachen University of Applied Sciences.
Stefan has 6 certificates. Among them, these include: ISMS-Risikomanager, Certified OT Security Practitioner (IEC 62443), and ISMS-Auditor.
Stefan will be available full-time from November 2026.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 23 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Information Security Consultant
Nearby freelancers
Professionals working in or nearby Würselen, Germany
