Steffen Lotze-Data Protection Officer and Information Security Specialist

Check rate
Experience
Consultant for BSI baseline protection and ISO 27701
Society for International Cooperation
- Support in building and further developing the information security management system
- Cooperation with external consultants in the certification team for the support structure
- Involvement in project planning, identification, and implementation of the necessary measures according to BSI IT baseline protection
- Professional support for in-house subject matter experts in creating the documents required for certifications
- Carrying out the work according to BSI 200-2
Data Protection Officer and Information Security Specialist
Mobility inside Plattform GmbH
- Creation of concepts and policies for the specialist departments in HR, product management, development, and IT administration, as well as all company-wide policies
- Advising on the setup and management of the record of processing activities (RoPA)
- Review and expansion of the contractual situation according to Art. 28 GDPR
- Review and expansion of the documents according to Art. 44 et seq. GDPR
- Conducting individual and group training sessions (~10 people) up to executive level (C-level)
- Data protection contact for public transport associations across Germany
- Preparation for certification readiness according to BSI baseline protection
Achievements:
- Setup of database-based generation of customer-specific privacy policies
- Reconciliation of all transport companies through structured communication, strong arguments, and delivery of quality
Senior Consultant for Information Security and Data Protection
glacier-ac GmbH
- Building management systems to meet the requirements of TISAX, ISO 27001, and GDPR for OEM customers and suppliers at levels Trier 1 and Trier 2
Expert Data Privacy – BayLfSt Staff Unit
secunet Security Networks AG
- Preparation and execution of data protection audits in the ELSTER information network, including data protection impact assessments (DPIA)
- Execution of ISO 27001/BSI baseline protection audits in a public authority environment
- Information security training
- Creation and revision of the logging policy, cryptography concept, backup concept, training concept, home office policy, document control policy, policy for the classification of data and assets
- Introduction of new IT clusters into the ISMS scope
Achievements:
- Significant improvement in data protection quality and documentation in the ELSTER and authega information clusters for the Bavarian State Office for Taxes (BayLfSt)
- ELSTER was fully audited from a data protection point of view in 2022
Data Protection Officer
Self-employed
- Supporting clients as an external data protection officer
- Advising on information security projects and data protection policies
- Risk factor analysis and identification of protective measures
Clients:
- MAGNA sweets GmbH
- moving GmbH
- NAVUM GmbH
- Projektil GbR
Software Consultant for ERP Systems
SelectLine Software GmbH
- Coordination between the requirements in the specification document and the scope of the ERP software (SCOR processes, warehouse logistics, CRM, accounting)
- On-site presentation of the ERP software using customer-specific process examples for management, specialist departments, and key users
- Documentation in BPMN
ERP Consultant for ERP Systems
Step Ahead AG
- Planning and implementation of ERP projects
- Customization of the GUI and adaptation to customer processes
Inside Sales Executive / Technical Pre-Sales
estos GmbH
- Professional support for partners and existing customers
- Product presentations and customer consulting
Technical Employee in the IT Department
Bavaria Direktmarketing GmbH
- Import and export of data, data validation, enrichment, preparation, and analysis in Excel
- Trainer for apprentices
SEO Agency
Self-employed
- Market analysis for the viability of an SEO agency
- Creation of various websites and implementation of SEO measures
Project Manager and CRM Consultant
CuT Alexander v. Sivers
- Responsibility for project management during the company-wide rollout of CRM software at customers of the IT systems house
- Customizing the software interface and adapting it to customer processes
- 1st and 2nd level support for CRM software
- Introduction of an accounting document structure and monitoring of document flow
- Establishing measures to reduce outstanding receivables volume
Owner and Managing Director
Medienhaustechnik Lotze
- Acquiring, planning, and carrying out projects for high-end media technology for private customers during the construction phase in the DACH region
- Programming and designing GUIs for controlling consumer electronics in heterogeneous environments and integrating them into building management systems
- Regular evaluation of BWA, SuSa, and open item lists
Member of the Examination Committee for Sales Staff and Managing Directors
Hifi-Forum München GmbH
- Securing the company’s order situation
- Shaping business policy within the framework of the franchise agreement
Retail Salesperson and Internal Sales Representative
ELO-Touch Systems GmbH; AVNET Alfapower GmbH; Radio Arndt Inh. Harald Behr
Focus: technically complex products requiring a high level of consultation
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Construction, Professional Services, Retail, Government and Administration, and Advertising.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Project Management, Accounting, Customer Service, Sales, and Legal.
Summary
As an experienced data protection expert, I have been implementing information security projects and data protection projects since 2018 to ensure the security of sensitive data.
My main goal is to strengthen the company’s compliance and make sure that the company meets the requirements of NIS-2 and the GDPR.
As an advisory person in your company, I communicate as an equal with employees and managers and work with you to shape the processes and their implementation.
For me, this is about proving compliance with the requirements from data protection, information security, the Trade Secrets Act, and the AI Act. The key to successful implementation is identifying the risk factors in your company.
Skills
- Complex Products
- High-Quality Products
- Close To The Customer
- Legal Certainty And Innovation
Languages
Education
Bebo-Wager Vocational School Augsburg
Secondary school leaving certificate · Radio and Television Technician · Augsburg, Germany · 2.5
Certifications & licenses
GDD · Bonn, Germany
TTDSG
TÜV Süd · Munich, Germany
Lead Auditor ISO 27701
QSkills · Nuremberg, Germany
qSkills GmbH & Co. KG · Essen, Germany
TÜV Rheinland · Munich, Germany
Quality Assurance Officer
IHK for Munich and Upper Bavaria · Munich, Germany
TÜV Rheinland · Munich, Germany
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Steffen is based in Grafrath, Germany and can operate in on-site, hybrid, and remote work models.
Steffen speaks the following languages: German (Native).
Steffen has at least 34 years of experience. During this time, Steffen has worked in at least 14 different roles and for 13 different companies. The average length of individual experience is 2 years and 5 months. Note that Steffen may not have shared all experience and actually has more experience.
Based on recent experience, Steffen would be well-suited for roles such as: Consultant for BSI baseline protection and ISO 27701, Data Protection Officer and Information Security Specialist, Senior Consultant for Information Security and Data Protection.
Steffen's most recent position is Consultant for BSI baseline protection and ISO 27701 at Society for International Cooperation.
In recent years, Steffen has worked for Society for International Cooperation, Mobility inside Plattform GmbH, glacier-ac GmbH, secunet Security Networks AG, and Self-employed.
Steffen is most experienced in industries like Information Technology, Construction, and Retail. Steffen also has some experience in Professional Services, Advertising, and Government and Administration.
Steffen is most experienced in business areas like Information Technology, Project Management, and Accounting. Steffen also has some experience in Customer Service, Sales, and Legal.
Steffen has recently worked in industries like Professional Services, Information Technology, and Government and Administration.
Steffen has recently worked in business areas like Legal, Information Technology, and Quality Assurance.
Steffen attended Bebo-Wager Vocational School Augsburg for Radio and Television Technician.
Steffen has 10 certificates. Among them, these include: Data Protection Auditor, TTDSG, and Lead Auditor ISO 27001.
Steffen is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 25 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Consultant for BSI baseline protection and ISO 27701
Nearby freelancers
Professionals working in or nearby Grafrath, Germany
