Skip to main content
Top expert badge
Recommended expert
Profile header background

Steffen Lotze-Data Protection Officer and Information Security Specialist

Steffen Lotze - Data Protection Officer and Information Security Specialist - profile avatar
Profile header overlay
Available
Grafrath, Germany

Check rate

Experience

Jun 2024 - Mar 2025
Eschborn, Germany
Hybrid

Consultant for BSI baseline protection and ISO 27701

Society for International Cooperation

Position summary
Consultant for BSI baseline protection and ISO 27701 at Society for International Cooperation
Industries
Information Technology
Business areas
Information Technology
Project Management
  • Support in building and further developing the information security management system
  • Cooperation with external consultants in the certification team for the support structure
  • Involvement in project planning, identification, and implementation of the necessary measures according to BSI IT baseline protection
  • Professional support for in-house subject matter experts in creating the documents required for certifications
  • Carrying out the work according to BSI 200-2
Feb 2023 - Mar 2024
Frankfurt am Main, Germany

Data Protection Officer and Information Security Specialist

Mobility inside Plattform GmbH

Position summary
Data Protection Officer and Information Security Specialist at Mobility inside Plattform GmbH
Industries
Information Technology
Business areas
Information Technology
Legal
  • Creation of concepts and policies for the specialist departments in HR, product management, development, and IT administration, as well as all company-wide policies
  • Advising on the setup and management of the record of processing activities (RoPA)
  • Review and expansion of the contractual situation according to Art. 28 GDPR
  • Review and expansion of the documents according to Art. 44 et seq. GDPR
  • Conducting individual and group training sessions (~10 people) up to executive level (C-level)
  • Data protection contact for public transport associations across Germany
  • Preparation for certification readiness according to BSI baseline protection

Achievements:

  • Setup of database-based generation of customer-specific privacy policies
  • Reconciliation of all transport companies through structured communication, strong arguments, and delivery of quality
Jul 2022 - Oct 2022
Unterschleißheim, Germany

Senior Consultant for Information Security and Data Protection

glacier-ac GmbH

Position summary
Senior Consultant for Information Security and Data Protection at glacier-ac GmbH
Industries
Automotive
Business areas
Information Technology
Quality Assurance
  • Building management systems to meet the requirements of TISAX, ISO 27001, and GDPR for OEM customers and suppliers at levels Trier 1 and Trier 2
Sep 2019 - Jun 2022
Munich, Germany

Expert Data Privacy – BayLfSt Staff Unit

secunet Security Networks AG

Position summary
Expert Data Privacy – BayLfSt Staff Unit at secunet Security Networks AG
Industries
Information Technology
Government and Administration
Business areas
Information Technology
Quality Assurance
  • Preparation and execution of data protection audits in the ELSTER information network, including data protection impact assessments (DPIA)
  • Execution of ISO 27001/BSI baseline protection audits in a public authority environment
  • Information security training
  • Creation and revision of the logging policy, cryptography concept, backup concept, training concept, home office policy, document control policy, policy for the classification of data and assets
  • Introduction of new IT clusters into the ISMS scope

Achievements:

  • Significant improvement in data protection quality and documentation in the ELSTER and authega information clusters for the Bavarian State Office for Taxes (BayLfSt)
  • ELSTER was fully audited from a data protection point of view in 2022
Nov 2018 - May 2026
Germany

Data Protection Officer

Self-employed

Position summary
Data Protection Officer at Self-employed
Industries
Professional Services
Business areas
Legal
  • Supporting clients as an external data protection officer
  • Advising on information security projects and data protection policies
  • Risk factor analysis and identification of protective measures

Clients:

  • MAGNA sweets GmbH
  • moving GmbH
  • NAVUM GmbH
  • Projektil GbR
May 2017 - Jun 2018
Magdeburg, Germany

Software Consultant for ERP Systems

SelectLine Software GmbH

Position summary
Software Consultant for ERP Systems at SelectLine Software GmbH
Industries
Information Technology
Business areas
Accounting
Information Technology
Logistics
  • Coordination between the requirements in the specification document and the scope of the ERP software (SCOR processes, warehouse logistics, CRM, accounting)
  • On-site presentation of the ERP software using customer-specific process examples for management, specialist departments, and key users
  • Documentation in BPMN
Dec 2016 - Mar 2017
Germering, Germany

ERP Consultant for ERP Systems

Step Ahead AG

Position summary
ERP Consultant for ERP Systems at Step Ahead AG
Industries
Information Technology
Professional Services
Business areas
Information Technology
Project Management
  • Planning and implementation of ERP projects
  • Customization of the GUI and adaptation to customer processes
Jun 2016 - Nov 2016
Starnberg, Germany

Inside Sales Executive / Technical Pre-Sales

estos GmbH

Position summary
Inside Sales Executive / Technical Pre-Sales at estos GmbH
Industries
Information Technology
Business areas
Customer Service
Sales
  • Professional support for partners and existing customers
  • Product presentations and customer consulting
Mar 2014 - May 2016
Munich, Germany

Technical Employee in the IT Department

Bavaria Direktmarketing GmbH

Position summary
Technical Employee in the IT Department at Bavaria Direktmarketing GmbH
Industries
Advertising
Business areas
Business Intelligence
Information Technology
  • Import and export of data, data validation, enrichment, preparation, and analysis in Excel
  • Trainer for apprentices
Mar 2013 - Feb 2014
Germany

SEO Agency

Self-employed

Position summary
SEO Agency at Self-employed
Industries
Advertising
Business areas
Marketing
  • Market analysis for the viability of an SEO agency
  • Creation of various websites and implementation of SEO measures
Apr 2010 - Feb 2013
Munich, Germany

Project Manager and CRM Consultant

CuT Alexander v. Sivers

Position summary
Project Manager and CRM Consultant at CuT Alexander v. Sivers
Industries
Information Technology
Business areas
Customer Service
Information Technology
Project Management
  • Responsibility for project management during the company-wide rollout of CRM software at customers of the IT systems house
  • Customizing the software interface and adapting it to customer processes
  • 1st and 2nd level support for CRM software
  • Introduction of an accounting document structure and monitoring of document flow
  • Establishing measures to reduce outstanding receivables volume
May 2000 - Mar 2010
Germany

Owner and Managing Director

Medienhaustechnik Lotze

Position summary
Owner and Managing Director at Medienhaustechnik Lotze
Industries
Construction
Information Technology
Business areas
Accounting
Information Technology
Project Management
  • Acquiring, planning, and carrying out projects for high-end media technology for private customers during the construction phase in the DACH region
  • Programming and designing GUIs for controlling consumer electronics in heterogeneous environments and integrating them into building management systems
  • Regular evaluation of BWA, SuSa, and open item lists
Feb 1998 - Apr 2000
Munich, Germany

Member of the Examination Committee for Sales Staff and Managing Directors

Hifi-Forum München GmbH

Position summary
Member of the Examination Committee for Sales Staff and Managing Directors at Hifi-Forum München GmbH
Industries
Retail
Business areas
Sales
Strategy
  • Securing the company’s order situation
  • Shaping business policy within the framework of the franchise agreement
Mar 1992 - Jan 1998

Retail Salesperson and Internal Sales Representative

ELO-Touch Systems GmbH; AVNET Alfapower GmbH; Radio Arndt Inh. Harald Behr

Position summary
Retail Salesperson and Internal Sales Representative at ELO-Touch Systems GmbH; AVNET Alfapower GmbH; Radio Arndt Inh. Harald Behr
Industries
Information Technology
Retail
Business areas
Customer Service
Sales

Focus: technically complex products requiring a high level of consultation

Industry experience

See where this freelancer has spent most of their professional time.

Experienced in Information Technology, Construction, Professional Services, Retail, Government and Administration, and Advertising.

Information Technology
Construction
Professional Services
Retail
Government and Administration
Advertising
Profile match chart

Business area experience

See which departments and functions this freelancer has contributed to most.

Experienced in Information Technology, Project Management, Accounting, Customer Service, Sales, and Legal.

Information Technology
Project Management
Accounting
Customer Service
Sales
Legal
Profile match chart

Summary

As an experienced data protection expert, I have been implementing information security projects and data protection projects since 2018 to ensure the security of sensitive data.

My main goal is to strengthen the company’s compliance and make sure that the company meets the requirements of NIS-2 and the GDPR.

As an advisory person in your company, I communicate as an equal with employees and managers and work with you to shape the processes and their implementation.

For me, this is about proving compliance with the requirements from data protection, information security, the Trade Secrets Act, and the AI Act. The key to successful implementation is identifying the risk factors in your company.

Skills

  • Complex Products
  • High-Quality Products
  • Close To The Customer
  • Legal Certainty And Innovation

Languages

German
Native

Education

Sep 1988 - Feb 1992

Bebo-Wager Vocational School Augsburg

Secondary school leaving certificate · Radio and Television Technician · Augsburg, Germany · 2.5

Certifications & licenses

GDD · Bonn, Germany

TTDSG

TÜV Süd · Munich, Germany

Lead Auditor ISO 27701

QSkills · Nuremberg, Germany

qSkills GmbH & Co. KG · Essen, Germany

TÜV Rheinland · Munich, Germany

Quality Assurance Officer

IHK for Munich and Upper Bavaria · Munich, Germany

TÜV Rheinland · Munich, Germany

Statistics

Experience

Total positions 14
Experience in Information Technology 25 y
Avg length 2 y 8 m
Longest experience 9 y 10 m

Global experience

Countries worked in 1 (Germany)
Primary country Germany

Expertise

Recent roles Consultant for BSI baseline protection and ISO 27701, Data Protection Officer and Information Security Specialist, Senior Consultant for Information Security and Data Protection
Main industries Information Technology, Construction, Professional Services
Main business areas Information Technology, Project Management, Accounting

Qualifications

Certifications earned 10

Profile

Member since
Last update
Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions

Frequently asked questions

Have questions? Find more information here.

Steffen is based in Grafrath, Germany and can operate in on-site, hybrid, and remote work models.

Steffen speaks the following languages: German (Native).

Steffen has at least 34 years of experience. During this time, Steffen has worked in at least 14 different roles and for 13 different companies. The average length of individual experience is 2 years and 5 months. Note that Steffen may not have shared all experience and actually has more experience.

Based on recent experience, Steffen would be well-suited for roles such as: Consultant for BSI baseline protection and ISO 27701, Data Protection Officer and Information Security Specialist, Senior Consultant for Information Security and Data Protection.

Steffen's most recent position is Consultant for BSI baseline protection and ISO 27701 at Society for International Cooperation.

In recent years, Steffen has worked for Society for International Cooperation, Mobility inside Plattform GmbH, glacier-ac GmbH, secunet Security Networks AG, and Self-employed.

Steffen is most experienced in industries like Information Technology, Construction, and Retail. Steffen also has some experience in Professional Services, Advertising, and Government and Administration.

Steffen is most experienced in business areas like Information Technology, Project Management, and Accounting. Steffen also has some experience in Customer Service, Sales, and Legal.

Steffen has recently worked in industries like Professional Services, Information Technology, and Government and Administration.

Steffen has recently worked in business areas like Legal, Information Technology, and Quality Assurance.

Steffen attended Bebo-Wager Vocational School Augsburg for Radio and Television Technician.

Steffen has 10 certificates. Among them, these include: Data Protection Auditor, TTDSG, and Lead Auditor ISO 27001.

Steffen is immediately available full-time for suitable projects.

Daily rate distribution

0 2 4 6 8
<€720 €720-​800 €800-​880 €880-​960 €960+

The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.

Average rates for similar positions

Rates are based on recent contracts and do not include FRATCH margin.

1000
750
500
250
Rate comparison chart
Daily rate avg. 870 €

The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.

1000
750
500
250
Rate comparison chart
Median rate 860 €

The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.

Calculated based on our freelancers’ daily rates as of 25 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.