BSI IT-Grundschutz Experts in Berlin
matched in minutes from vetted and available professionals with the power of AI.Hire experts who can assess controls, build security concepts, and prepare documentation for audits and certifications with BSI IT-Grundschutz. They support gap analysis, implementation plans, and ongoing compliance work, with fast, precise matching to vetted, available freelancers.
Meet FRATCH Experts in Berlin, who have recently used BSI IT-Grundschutz
Andreas Rühl
Last position:
Freelance Consultant for Information Security at A-R-C Andreas Rühl Consulting
Development and implementation of tailored information security strategies
Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards
Risk management and creation of security concepts
Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000
Building and improving security organizations
Creation and implementation of guidelines, policies, work instructions, and process descriptions
Audit support and certification preparation
Conducting trainings, workshops, and awareness campaigns
Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies
Conducting penetration tests and vulnerability analyses
Consulting on the selection, integration, and management of security architectures in complex IT environments
Consulting on ITSM and managed security services and SOC
Leading and managing complex projects to improve information security
Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics
Introduction and quality assurance of management, documentation, and knowledge management systems
Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)
Development and implementation of risk analysis procedures
Organizing initial response, forensic investigations, and organizational measures in the event of security incidents
Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios
Awareness campaigns to promote security culture in companies
Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards
Simulations and exercises to prepare for information security incidents
Interim management for leading information security projects or IT security organizations
Taking on the role of an external CISO (Chief Information Security Officer)
Support in developing and implementing IT security and corporate strategies
Coaching and mentoring of managers in the field of information security
Building and leading security departments as well as recruiting and qualifying employees
Temporary assumption of management responsibility in critical situations
André Beran
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
André Görst
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Matthias Steinmann
Last position:
Senior Security Consultant (freelance) at DVZ M-V
- ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
- Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
- Preparation for OWASP penetration test, incident response plan, risk analysis
- DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
- Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM
Jörg Hoffmann
Last position:
Managing Director; Data Protection Officer; Information Security Officer at Datenschutz24 (brand of Sovestro GmbH)
- Drafting company agreements related to data protection
- Acting as a mediator between business interests and data subject rights in a corporate context
- Process analysis and evaluation regarding data protection and information security implications according to GDPR, BDSG, BSI baseline protection
- Support for information security audits according to ISO 27001
- Implementation of change management processes
- Analysis of IT infrastructure and deriving recommendations
- Expert support in legal proceedings and communication with supervisory authorities
- Preparation of data protection impact assessments (DPIAs) and procedure and processing documentation (VVZ)
- Training on corporate data protection and information security
- Cooperation with law firms in legal proceedings
Jan Kopia
Last position:
Consultant for Information Security & Auditor at Kopiasonsulting GmbH
Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures
Henryk Orantek
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Markus Willems
Last position:
KRITIS Consultant at Oil Company
- Preparing an oil company for KRITIS auditing
- KRITIS consulting
- Creating necessary policies, processes, and guidelines in line with KRITIS requirements
- Tools and methodologies used: ISO/IEC 27001, BSI IT Baseline Protection, KRITIS-V
Discover over 15,000 top freelancers
Statistics of experts using BSI IT-Grundschutz
Aggregated from the professional profiles of matched freelancers.
Experience
30 years (Germany: 24 years)
Position duration
2.5 years (Germany: 2.8 years)
Positions per freelancer
27 (Germany: 17)
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Professional Services, Information Technology, Education
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
86%
Master's degree or higher
57% (Germany: 56%)
Doctorate
14% (Germany: 10%)
Certifications per freelancer
14 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 94%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using BSI IT-Grundschutz
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Core purpose
BSI IT-Grundschutz is a structured method for building and reviewing information security. It helps organizations identify assets, assess risks, and apply suitable safeguards in a consistent way. Companies use it to create clear security documentation and to prepare for audits, internal reviews, and certification work.
Typical work
- Security concepts and target states
- Gap analysis against IT-Grundschutz modules
- Risk treatment and control mapping
- Audit preparation and evidence packs
- Support for ISMS documentation
Method and ecosystem
The method is closely linked to the BSI standards, especially the catalog of modules and recommendations for technical, organizational, and physical safeguards. Strong professionals know how to translate those requirements into practical measures for networks, servers, identities, and operations. They also work well with ISO 27001-oriented teams when both frameworks need to align.
When specialists help
Companies usually bring in freelance expertise when security work needs speed, structure, or extra hands. This is common during new ISMS setups, re-certification prep, supplier reviews, or major infrastructure changes. In Berlin, this often fits organizations that need short-term support across regulated, public-sector, and enterprise environments.
What strong professionals do
Strong specialists do more than fill templates. They ask how the organization actually runs systems, who owns each control, and what evidence already exists. They can turn BSI IT-Grundschutz into concrete tasks for technical teams and keep the wording clear for management, auditors, and documentation owners.
Engagement focus
- On-site workshops and interviews
- Remote document review and control mapping
- Help with German-language evidence and reporting
- Practical guidance for mixed IT and security teams
For companies hiring in Berlin, the best fit is usually someone who can work with local stakeholders, but also support remote delivery when documentation and control design are the main tasks.
Frequently asked questions
Curious about BSI IT-Grundschutz? Here are the answers that come up again and again.
BSI IT-Grundschutz is used to structure information security in a practical way. It helps companies define safeguards, document responsibilities, and show how security controls are implemented across systems and processes. Many organizations also use it as a basis for audit preparation and for building an ISMS.
BSI IT-Grundschutz gives a more detailed set of recommended safeguards and a very structured method for implementation. ISO 27001 is a broader standard for an information security management system, while IT-Grundschutz is often used to make the control work more concrete. Many teams use both together instead of treating them as competitors.
A strong BSI IT-Grundschutz freelancer is useful when the internal team needs support for a new security concept, a gap review, or certification preparation. Companies also bring in specialists when they need help turning technical controls into usable documentation. This is common when time is tight or when security know-how is spread across several teams.
A good BSI IT-Grundschutz specialist usually also understands ISMS work, risk analysis, documentation, and technical infrastructure. Familiarity with ISO 27001, audit preparation, identity management, network security, and evidence handling is often valuable. For Berlin-based organizations, clear German writing is often important as well.
Not every BSI IT-Grundschutz engagement needs a full-time security lead. Smaller projects may only need someone who can review existing controls, guide workshops, and clean up documentation. Larger or certification-driven work benefits from a specialist who has already handled several complete implementations.
Yes, much of BSI IT-Grundschutz can be delivered remotely, especially document review, control mapping, and preparation of evidence. On-site time helps when interviews, workshops, or sensitive stakeholder discussions are needed. Many teams use a hybrid setup, especially when the company is in Berlin but the specialist works from elsewhere.
Look for someone who can explain controls in plain language and connect them to real systems, not just to templates. Strong BSI IT-Grundschutz professionals produce clear documentation, identify missing evidence, and keep work aligned with the organization’s actual operations. They should also understand where shortcuts create audit risk.
A good BSI IT-Grundschutz freelancer should be comfortable with workshops, document analysis, and working across technical and non-technical teams. They should know how to read existing policies, assess evidence, and turn findings into next steps. If the client is in Germany, they often need to work in German or at least handle German security documentation well.
The average hourly rate of freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects is 115 €, which corresponds to a daily rate of about 917 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects, 86% hold at least a Bachelor's degree, 57% hold at least a Master's degree, and 14% hold a doctorate.
On average, freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects have 30 years of professional experience, with a single engagement typically lasting around 2.5 years.
The most common languages among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are German (100%), English (100%), and French (25%).
The most common industries among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are Professional Services (100%), Information Technology (88%), and Education (63%).
The most common business areas among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are Information Technology (100%), Project Management (88%), and Quality Assurance (88%).
Main locations of FRATCH Experts, who have recently used BSI IT-Grundschutz
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!

Munich
Cologne
Frankfurt
Dusseldorf