Volker J.-Interim CISO (Germany, Austria, US, APAC), Auditor

Check rate
Experience
Interim CISO (Germany, Austria, US, APAC), Auditor
Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Interim CISO, Auditor
METRONOMIA Clinical Research GmbH
- Prepared for ISO 27001:2013 certification audit
- Drafted ISO 27001 implementation roadmap
- Scoped and implemented ISO 27001:2013 requirements
- Planned and conducted migration from ISO 27001:2013 to ISO 27001:2022
- Created comprehensive migration roadmap for ISO 27001:2022
- Improved and performed risk assessments and reporting
- Enhanced vulnerability scanning, management, and reporting
- Managed ISMS documentation and management reporting with monthly updates
- Improved supply chain risk assessment and reporting
- Enhanced cyber resilience
- Improved admission and access management including privileged access
- Improved identity and access management process, monitoring, and reporting
- Enhanced crisis management process and documentation
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Enhanced external vulnerability scanning and incident management and reporting process
- Planned and conducted supplier risk assessments to ensure compliance with internal and regulatory requirements
- Enhanced privileged access rights management and monitoring
- Conducted internal audits to comply with ISO 27001 Annex A
- Provided management status and risk reporting
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Enhanced information security strategy
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Defined and installed CISO-relevant information security KPI reporting
- Planned and conducted awareness trainings for employees, administrators, and management
- Installed regular joint forums with Quality and IT lead
- Set up regular joint forums with external DPO
- Prepared and conducted KRITIS/NIS-2 relevance assessment for the enterprise
Interim CISO (Germany, Hungary, Spain), Auditor, Deputy DPO
Framatome GmbH
- Responsible for information security across the company and its subsidiaries in close cooperation with global and regional CISOs
- Conducted BIA/BCM assessment to implement risk mitigation measures and process optimization
- Developed awareness and phishing campaigns in Germany, Hungary, and Spain
- Drafted security guidelines and processes for data carrier destruction
- Reported information security status to the SMC and the Cybersecurity Steering Committee
- Created and reviewed ISMS interface documentation and all other relevant documents
- Enhanced crisis management process and documentation
- Improved identity and access management process
- Created budget forecasts for upcoming information security investments (technology, staffing, trainings)
- Set up regular joint forums with risk manager and IT lead
- Improved asset classification and asset management
- Drafted cyber resilience strategy and roadmap
- Aligned local strategy with global cybersecurity strategy
- Improved risk management and reporting process
- Set up SIEM/SOC and incident reporting
- Conducted supplier audits
- Developed and released cyber resilience guidelines
- Drafted internal guidelines for handling VS-NfD information
- Improved vulnerability scanning and penetration testing
- Improved network segmentation for IT/OT
- Reviewed and reworked roles and responsibilities
- Sketched audit plan for service providers
Consultant Supply Chain Resilience Strategy
Siemens AG
- Reviewed Charter of Trust CP documents regarding cybersecurity measures for customers and suppliers
- Collaborated with legal department on new and updated information security clauses
- Performed protection requirement analysis for contractual cybersecurity measures
- Conducted service provider audits (GDPR, processes, cybersecurity) and risk assessments
- Developed measures and contractual clauses to improve cybersecurity in the supply chain
Deputy Project Manager and Topic Lead, Risk and Efficiency Assessment of the Global Certificate Management Infrastructure
Munich Re
- Assessed risk and efficiency of the global certificate management lifecycle infrastructure
- Conducted protection requirements analysis according to ISO 27001:2013 and BSI standards
- Aligned infrastructure with ISMS requirements
- Redesigned resilience measures for the global certificate management process
- Designed network segmentation for the new PKI
- Optimized, centralized, and standardized global certificate management processes as sub-project manager
- Trained external service provider
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Pharmaceutical, Manufacturing, Energy, and Insurance.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Audit, Legal, Supply Chain Management, and Project Management.
Skills
- Interim Management
- Leadership
- Management Reporting
- Iso/Iec 27001
- Nis-2 / Cer
- Bsi / Kritis
- Ai
- Risk Management
- Audit
- Gdpr
- Isms
- Itil & Itsm
- Management
- Awareness Trainings
Languages
Education
Power plant electrician
Certifications & licenses
Statistics
Experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Volker is based in Gröbenzell, Germany and prefers 100% remote projects.
Volker speaks the following languages: German (Native), English (Advanced).
Volker has at least 7 years of experience. During this time, Volker has worked in at least 5 different roles and for 5 different companies. The average length of individual experience is 1 year and 4 months. Note that Volker may not have shared all experience and actually has more experience.
Based on recent experience, Volker would be well-suited for roles such as: Interim CISO (Germany, Austria, US, APAC), Auditor, Interim CISO, Auditor, Interim CISO (Germany, Hungary, Spain), Auditor, Deputy DPO.
Volker's most recent position is Interim CISO (Germany, Austria, US, APAC), Auditor at Vetter Pharma-Fertigung GmbH & Co. KG.
In recent years, Volker has worked for Vetter Pharma-Fertigung GmbH & Co. KG, METRONOMIA Clinical Research GmbH, and Framatome GmbH.
Volker is most experienced in industries like Pharmaceutical, Energy, and Manufacturing. Volker also has some experience in Insurance, Information Technology, and Professional Services.
Volker is most experienced in business areas like Information Technology, Audit, and Legal. Volker also has some experience in Supply Chain Management, Project Management, and Quality Assurance.
Volker has recently worked in industries like Pharmaceutical, Energy, and Manufacturing.
Volker has recently worked in business areas like Audit, Information Technology, and Legal.
Volker attended education in Power plant electrician.
Volker has 1 certificate: CISM.
The availability of Volker needs to be confirmed.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 7 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Interim CISO (Germany, Austria, US, APAC), Auditor
Nearby freelancers
Professionals working in or nearby Gröbenzell, Germany
