IT Auditors in Germany
in minutes from over 15,000 CVs with the power of AI.Bring in specialists for IT general controls, SAP and ERP reviews, access rights testing, and SOX or ISO 27001 support. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH IT Auditors in Germany
Christian F.
Last position:
Project Lead & Cyber Security Consultant at Deutsche Börse Gruppe
- Established a cyber resilience framework for AI-accelerated threats in the Frontier AI Threat Endurance (FATE) program: capability assessments, maturity assessments and gap analyses covering cyber security, operational resilience, incident response, recovery and governance, followed by target concepts and improvement measures
- Supported action owners from specification through implementation: implementation roadmaps, decision papers, management presentations and governance reporting, as well as audit- and supervision-ready documentation; managed stakeholders from IT, Information Security, Risk Management, Operational Resilience, Business Continuity and the business units
Kartheek K.
Last position:
Advisor & Investor (Limited Partner) at Destrosolutions
- Advised the executive team on the strategy, architecture, and development of an AI-powered Product Security Operations Center (PSOC); a cybersecurity operating system for software-defined cyber physical connected systems.
- Provided strategic guidance on product vision, regulatory alignment, and market positioning, supporting capabilities across threat intelligence, vulnerability management, compliance automation, and autonomous product security.
Kai P.
Last position:
Oracle Project Management and DBA at Scope Solutions AG
PROFILE Senior Oracle specialist, consultant and DBA with many years of experience in planning, architecture, installation, migration, operations, performance tuning and troubleshooting of large Oracle database environments. Focus on Oracle Database 19c and enterprise architectures with RAC, Active Data Guard, Golden Gate, Exadata, RMAN and CDB/PDB. Experience in heterogeneous enterprise environments on Linux, AIX, Solaris, HP-UX and Windows, as well as in cloud and migration projects. Over many years, worked as a technical consultant, DBA, architect and project manager for banks, insurers, energy providers, public institutions, industry, automotive and aviation. Combining technical Oracle expertise with operations concepts, migration, project planning, documentation and customer consulting.
ORACLE FOCUS AREAS
- Oracle Database 19c – installation, upgrade, patch/RU management, operations and troubleshooting
- Oracle Database 21c / 23ai / 26ai – knowledge of current Oracle release lines
- Oracle RAC, Active Data Guard, Data Guard, Oracle GoldenGate
- CDB / PDB, multitenant architectures and enterprise database operations
- Oracle Exadata and highly available database environments
- RMAN – backup, restore, recovery, migration and disaster recovery scenarios
- Data Pump (EXPDP / IMPDP), Transportable Tablespaces (TTS) and database-based migrations
- Performance analysis, SQL / PL/SQL, tuning, troubleshooting and capacity planning
- Oracle Enterprise Manager / monitoring and technical operational support
- Oracle Security: Wallet, TDE, Database Vault, VPD / RLS
- Oracle DWH / BI: OBIEE, ODI, OWB and Discoverer
- Oracle Applications / E-Business Suite and Oracle-based application environments
CURRENT PROJECTS
Scope Solutions AG, Basel / CH | 08/2023 – ongoing Oracle Project Management and DBA
- Installation, maintenance and regular upgrades of Oracle database systems with a focus on Oracle 19c.
- Patch and release management including OPatch and Release Updates; operations on RHEL 8.x, SLES 15.x and Windows.
- DBA support for customers in DACH and Europe and support of production, load test and other CDB/PDB environments.
- Technical operating processes and documentation via Confluence; support and service requests via My Oracle Support / Metalink.
Federal Employment Agency, Nuremberg | 04/2022 – 10/2023 Oracle Operations Support / DBA
- Operations and regular upgrades of Oracle-19c database systems on SLES 15.x.
- DBA for around 2,100 PDBs on RAC and Exadata in production, integration, load test and other environments.
- Configuration management via ARS Remedy; workflows and technical documentation via Jira and Confluence.
- Operations support and processing of service requests via My Oracle Support / Metalink.
Federal Statistical Office, Wiesbaden | 09/2021 – 03/2022 Oracle Operations and Architecture – 2022 Survey
- Merging data into a central Oracle-19c database system.
- Design of import/export procedures for the central data structure.
- KPI and performance architecture for analyses.
- Training employees in Oracle performance and DBA topics.
E.ON Digital Technology, Landshut / KKI | 03/2019 – 12/2021 Oracle Operations, Architecture and DBA
- Patch concepts, technical documentation, installation, database administration and operations of Oracle 12c/19c.
- AIX 7.x, LPAR administration including VIO server and software distribution with NIM.
- Performance monitoring and monitoring.
- Backup and restore with TSM / IBM Spectrum Protect and Oracle RMAN.
- Installation of Enterprise Manager 13c with WebLogic Server 12.1x; employee training.
KaPe Munich – various end customers in DACH / Europe | ongoing / various projects Oracle DBA, architecture, migration, DWH consulting and project management
- Many years of consulting and operational DBA work in various Oracle architectures.
- DWH/CRM platforms: planning, analysis, performance and tuning, as well as business analysis.
- RAC, Data Guard, Transportable Tablespaces, RMAN and Oracle 11g/12c in enterprise environments.
- Customer projects including Burda, Deka, E.ON, Otto Group and Augsburger Allgemeine.
AXA, Germany / Europe | 09/2018 – 02/2019 Oracle DB Operations and Migration – Cloud Architectures
- Planning, methodology and execution of Oracle database migrations to IBM Private Cloud / Spectrum and AWS Public Cloud.
- Creation of Oracle databases in the cloud with SLES and Terraform templates.
- Technical architecture work and cloud KPIs.
RWE / SÜWAG / Syna, Germany | 07/2016 – 09/2018 Oracle DB Migrations 11g/12c and Project Management
- Design, planning and execution of Oracle database migrations 11g → 12c with platform and architecture changes.
- Windows Server 2012/2016 and setup and migration of Enterprise Manager/WebLogic-based monitoring environments.
- Use of Data Guard, TTS, EXPDP/IMPDP and RMAN based on analysis of application requirements.
- Performance and tuning for Oracle 11g/12c.
MTU Aero Engines, Munich | 01/2016 – 03/2017 Oracle DBA / Requirements Engineer
- Operations and development of Oracle 11g/12c databases and application workflows.
- Interfaces to SAP via BAPI.
- Design and management of APPS modules with Visual Basic / Visual Studio and PL/SQL; version control with SVN.
UBIS (HVB), Munich | 04/2012 – 08/2015 Oracle Operations, Architecture, DBA and Project Management
- Oracle-based operations and migration of MUREX and Sophis trading platforms.
- Oracle Security, Wallet, Tablespaces, RAC, Data Guard, Database Vault, GoldenGate and DWH.
- Project management for Oracle DWH migrations and release changes from 10g to 11gR2.
- Migration OWB 11gR2 → ODI 12c and introduction of Oracle Database 12c.
- Platforms: Red Hat, AIX and Solaris.
WWK Deutschland a.G., Munich | 09/2010 – 03/2012 Oracle DB and HP-UX → Linux Migration
- Architecture, planning, operations concept and migration of 104 databases from an HP-UX cluster to Red Hat Linux.
- Single Instance with Veritas Cluster and 2-node RAC 11.2.0.2; four Data Guard databases.
- Project management for OWB/DWH migrations (>1 TB), including tuning, PL/SQL, mappings and metadata.
Allianz Deutschland, ACAS Stuttgart | 03/2010 – 09/2010 Technical DWH Project Manager
- DWH project for processing European ETL data sources.
- Business analysis and requirements management for automated loading processes.
- OWB, PL/SQL, SQL*Loader, Oracle Advanced Security / TDE, Oracle BI and Database Vault.
NETMA, Munich-Taufkirchen | 08/2007 – 02/2010 Oracle Specialist and DBA for Oracle Applications 11i
- Operations of Oracle 9i/10g and Oracle Applications 11.5.10.
- Design and development of APPS modules with PL/SQL and SVN.
- Oracle RAC, Enterprise Manager, Oracle Application Server and migration tests.
- Platforms: AIX, SLES, Windows and HP-UX.
BT Germany, Munich | 11/2007 – 04/2008 Oracle DB Migration
- Migration from Oracle 8i to 10gR2 in a Solaris cluster environment.
- Preparing offers, project planning and process planning.
Itellium (KQ), Nuremberg | 02/2007 – 08/2007 Oracle DWH Specialist
- Design and analysis of a DWH focusing on master data and logistics.
- Oracle Designer, OWB, Oracle Database, ETL, PL/SQL and External Tables; data volumes up to approx. 5 TB.
Oracle Deutschland GmbH, Munich | 10/2006 – 02/2007 and further assignments Oracle Specialist / Consultant – Data Migration and DWH
- Consulting for customers such as Volkswagen, GE Money Bank, WeKa, KSB, Swisscom and British Telecom.
- Migration Discoverer EUL4 → EUL5i, database optimization, Data Guard and web/database analysis.
- Performance and tuning on Solaris and Linux.
HaSpa, Hamburg | 07/2006 – 10/2006 Oracle Specialist / Consultant – Data Migration and DWH
- Setup of an Oracle-10gR2 environment for banking applications.
- Data transfer from DB2 / OS390, architecture, sizing, tuning and performance.
- Data preparation and integration with OWB.
AUDI, Ingolstadt | 02/2005 – 06/2006 Oracle Consultant and DBA
- Operations, installation and maintenance of Oracle 9i/10g and IAS 10g.
- RMAN, Oracle RLS, Oracle HTMLDB, Veritas Cluster, Solaris and AIX / HACMP.
- Database cloning and migration 9i → 10g; approx. 200 systems up to 4.5 TB.
Photocolor, Kreuzlingen / CH | 11/2003 – 01/2005 Project Manager / Oracle
- Implementation, configuration, technical support and acceptance of an Oracle ERP/CRM solution.
- Oracle Applications, Oracle 9i, Solaris, HP-UX, OWB and Mercury TestDirector.
- Project scope approx. 2 TB; reporting to management.
ZPD NRW, Duisburg | 05/2003 – 10/2003 Oracle Consultant
- Consulting, PL/SQL training and project planning for a nationwide Oracle Forms integration.
- Oracle on HP Superdome / HP-UX; data volume 1.2 → 2.5 TB, sizing up to 5 TB.
Messe München GmbH | 11/2002 – 05/2003 Project Manager / Oracle
- MIS/DWH solution with OWB, Discoverer, Oracle 11i / 9i and RAC.
- Architecture, design, integration, troubleshooting and consulting for data volumes of 1.5–2 TB.
Aria SA Integration, Geneva / CH | 09/2002 – 11/2002 Oracle DBA and Consultant
- Oracle 8.1.7.4 / 9i; merging the Stuttgart and Geneva databases via replication.
Peter K.
Last position:
IT Audit Expert at Sparkasse
Support for Internal Audit:
Conducting an audit of the data protection officer and data protection management:
- Preparing an audit program based on the audit field concept
- Requesting the necessary audit documentation
- Carrying out control testing based on the audit program with the following focus:
- Reviewing the relevant PPS processes
- Reviewing the data protection mission statement, data protection policy, and data protection management concept
- Conducting audit interviews with the data protection officer
- Preparing the audit documentation
- Training a junior auditor in the methodology of Internal Audit
- Coordinating the audit documentation with the head of audit
Volker K.
Last position:
Head of Application Management at Bundeswehr FuhrparkServices GmbH
- Led 34 specialists in application management and software engineering
- Developed and ran fleet management for 45,000 vehicles for the German Armed Forces using SAP R/3 and SAP S/4 Hana modules
- Provided and enhanced software for rental and leasing business as well as mapping all company processes of BwFPS, including mobile apps
- Supported the electrification of the Bundeswehr vehicle fleet
- Developed and operated cloud-based custom solutions
- Responsible for the security architecture of the entire IT landscape, following the IT security requirements of the Bundeswehr, BSI IT-Grundschutz, and critical infrastructures
- Secured terrestrial communication networks, mobile networks, IT middleware, and applications against cyberattacks
- Migrated the fleet management system to SAP S/4 Hana, achieving efficiency gains
- Developed a complexity index for the IT landscape and reduced it through retirement, modernization, and interface removal
- Used AI models to support procurement processes, knowledge management, and process simplification
Peter W.
Last position:
ISO 27001 Auditor for health insurance archive system at Health insurance company
The replacement of the existing archive system (document management system – DMS) on a host-based platform is well advanced.
The internal audit is meant to ensure the company's quality standards.
GDPR
ISO 27001 ff.
BSI
DORA
Patient data regulations
Host / Cloud / S3 / Container / highly scalable / Nuxeo
Budget: 50,000
Team: 1
Ekrem T.
Last position:
Trainee Auditor ISO27001 at GUT Certifizierungsgesellschaft für Managementsysteme mbH
- Clients: SMEs and public organizations
Patrick G.
Last position:
Information Security Manager at IT-Freelancer
- Responsibility for Computer Software Validation (CSV) of the IT infrastructure
- Support in the operation and maintenance of the Integrated Management System (IMS)
- Work as interim Information Security Officer (ISMR) for two companies in the medical technology sector
- Ensuring ISO 27001 compliance within the organization
- Participation in implementing cybersecurity requirements for health software and connected medical devices according to ISO 81001-1
Volkmar J.
Last position:
Consultant at Bedia Motorentechnik GmbH & Co. KG
- Consulting on effort estimation for VDA ISA / TISAX certification
- Conducting a 2-day workshop including preparation and follow-up
- Skills: TISAX 5.1, ISO 27001:2022, auditing, information security, consulting, facilitation, presentation
Arndt S.
Last position:
Information Security Officer according to TISAX at Automotive Supplier
Jan K.
Last position:
Consultant for Information Security & Auditor at Kopiasonsulting GmbH
Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures
Christian H.
Last position:
Lead Auditor at Heutger GmbH
- Appointed Lead Auditor for ISO 27001 and TISAX at various certification bodies
Discover over 15,000 top freelancers
IT Auditors statistics
Aggregated from the professional profiles of matched freelancers.
Experience
22 years
Position duration
2.1 years
Positions per freelancer
18
Top business areas
Information Technology, Audit, Project Management
Top industries
Information Technology, Professional Services, Automotive
Certification focus areas
Information Technology, Audit, Quality Assurance
Bachelor's degree or higher
100%
Master's degree or higher
60%
Doctorate
20%
Certifications per freelancer
8
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this role in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates for IT Auditors in Germany
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
IT Auditors experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Professional Services (67%)
- Automotive (58%)
- Insurance (58%)
- Energy (50%)
- Banking and Finance (50%)
- Healthcare (50%)
- Manufacturing (50%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the role
What they do
IT auditors review how systems are controlled, secured, and governed. They test whether access, change management, logging, backups, and interfaces work as intended. They also document gaps, explain risk, and support remediation with clear findings.
Typical deliverables
- IT general controls reviews across access, change, and operations
- Application control testing for ERP, finance, and core business systems
- Risk and control matrices for audit planning and execution
- Evidence packs, issue logs, and remediation tracking
- Audit reports for internal audit, external audit, or management
Skills and tools
A strong IT Auditor understands both systems and business risk. They know how to trace a process from request to approval to system change, and how to spot weak points in the control design.
- Access management, privileged accounts, and segregation of duties
- Change control, release management, and configuration review
- SAP, Oracle, Microsoft environments, and common IAM tools
- ISO 27001, SOX, COBIT, and internal control frameworks
- Clear interview skills for control owners and technical teams
When companies bring them in
Companies hire freelance IT auditors when an audit is coming up, a control issue needs fast review, or internal teams need extra capacity. This is common in regulated sectors, shared service setups, and larger firms in Germany with complex ERP landscapes.
Freelancers are also a good fit when a company needs an independent view on a single scope, such as a SAP access review, a data center control check, or a post-incident audit.
What good looks like
Strong professionals do more than tick boxes. They understand the process behind the control, ask for the right evidence, and challenge weak answers without creating friction.
- They write findings that are specific and actionable
- They separate design gaps from operating failures
- They can talk to auditors, IT, security, and finance
- They stay calm when evidence is incomplete or inconsistent
Common hiring signals
If your team needs an IS auditor or information systems auditor, the work often sits between IT, compliance, and finance. You may also need an IT risk auditor when the focus is on control maturity, governance, or third-party risk.
Freelance support is useful when the scope is clear, the deadline is tight, and you want someone who can start with little handover. In Germany, companies often look for English-first collaboration, but local process knowledge can help in audits that involve regional teams or German-speaking evidence owners.
Frequently asked questions
Everything clients usually want to know about IT Auditors, in one place.
An IT Auditor checks whether systems, processes, and controls are working as they should. That usually includes access rights, change management, backups, logging, interfaces, and key application controls. The result is a clear view of risk, evidence, and what needs to be fixed.
A strong IT auditor needs control thinking, a solid grasp of systems, and the ability to question evidence carefully. They should know common frameworks like COBIT or ISO 27001 and be comfortable reviewing ERP, IAM, and security-related controls. Clear writing matters just as much as technical knowledge.
An IT risk specialist often looks at broader governance and risk themes, while an IT auditor focuses on testing controls and documenting what works, what fails, and why. A compliance specialist may check policy alignment, but an IT Auditor goes deeper into evidence and operating effectiveness. In practice, the roles overlap, but the audit mindset is more evidence-driven.
Freelance support makes sense when you need independent review for a defined scope, such as an internal audit, a remediation check, or a system go-live. It also helps when your team lacks capacity or needs a specialist for SAP, access reviews, or external audit support. For time-bound work, a freelancer can be the faster option.
Many audit tasks can be done remotely, especially document review, interviews, and control testing over shared evidence packs. On-site work is useful when access to systems is limited, when you need workshops with control owners, or when the environment is sensitive. In Germany, a mix of remote and on-site collaboration is common.
Expect a scoped test plan, evidence requests, control test results, findings, and a final report. A good IT Auditor also provides a traceable issue log with risk wording and remediation actions. For ongoing work, they may support follow-up testing and management updates.
Look for someone who can explain controls in plain language and show a structured approach to testing. They should ask for the right evidence, separate design issues from operating issues, and write findings that business owners can act on. A strong portfolio often shows work across ITGC, application controls, and audit reporting.
The same profile is often called an information systems auditor, IS auditor, or IT risk auditor. In some companies, the work sits under internal audit or technology audit. The title matters less than whether the person has real control-testing experience.
The average hourly rate for IT Auditors in Germany is 110 €, which corresponds to a daily rate of about 880 € based on an 8-hour working day.
Of the freelancers working as IT Auditors in Germany, 100% hold at least a Bachelor's degree, 60% hold at least a Master's degree, and 20% hold a doctorate.
On average, freelancers working as IT Auditors in Germany have 22 years of professional experience, with a single engagement typically lasting around 2.1 years.
The most common languages among freelancers working as IT Auditors in Germany are German (100%), English (100%), and French (17%).
The most common industries among freelancers working as IT Auditors in Germany are Information Technology (100%), Professional Services (67%), and Automotive (58%).
The most common business areas among freelancers working as IT Auditors in Germany are Information Technology (100%), Audit (92%), and Project Management (92%).
FRATCH IT Auditors main locations
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
