BSI IT-Grundschutz Experts in Berlin
matched in minutes with vetted, available freelancersHire experts who design information security management systems, build BSI IT-Grundschutz security concepts and prepare organisations for audits. FRATCH connects you quickly and precisely with vetted, available freelancers who fit your requirements.
Meet FRATCH Experts in Berlin, who have recently used BSI IT-Grundschutz
Mario S.
Last position:
Interim CTO
Through Sourcegarden GmbH, ongoing engagement. Transitioning software development to agentic development in phases, from setup and pilots through transformation and handover.
André B.
Last position:
External Attack Surface Assessment & Cybersecurity Readiness Checks at Graydaxe Cybersecurity GmbH
- Conducting cybersecurity readiness checks based on an in-house assessment methodology
- Analyzing the external attack surface using the Graydaxe EASM platform
- Assessing maturity levels and deriving prioritized recommendations for action
André G.
Last position:
IT Consulting Project Management / Engineering Subproject Management at T-Systems (on assignment for government agencies)
- Projects for federal networks (NdB).
- CR management, EoL change requests, design and documentation according to ITSCM.
- Data center planning.
- Project management and engineering subproject management.
- Software development for virtual server environments according to BSI.
Matthias S.
Last position:
Senior Security Consultant (freelance) at DVZ M-V
- ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
- Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
- Preparation for OWASP penetration test, incident response plan, risk analysis
- DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
- Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM
Jörg H.
Last position:
Managing Director; Data Protection Officer; Information Security Officer at Datenschutz24 (brand of Sovestro GmbH)
- Drafting company agreements related to data protection
- Acting as a mediator between business interests and data subject rights in a corporate context
- Process analysis and evaluation regarding data protection and information security implications according to GDPR, BDSG, BSI baseline protection
- Support for information security audits according to ISO 27001
- Implementation of change management processes
- Analysis of IT infrastructure and deriving recommendations
- Expert support in legal proceedings and communication with supervisory authorities
- Preparation of data protection impact assessments (DPIAs) and procedure and processing documentation (VVZ)
- Training on corporate data protection and information security
- Cooperation with law firms in legal proceedings
Jan K.
Last position:
Consultant for Information Security & Auditor at Kopiasonsulting GmbH
Operational management of the company: building teams and infrastructure, developing products, analysis and implementation of IT security measures
Project assignments in the IT security environment focusing on establishing blue teaming activities (defensive processes and technologies) to defend against cyber attacks
Conducting red teaming processes, including penetration tests and security analyses for companies
Consulting on setting up Security Operation Centers and implementing SIEM systems, and building Computer Incident Response Teams (CSIRT)
Auditor for ISO 9001 and ISO 27001, § 8a, ISO 27019, § 11 1a EnWG, TISAX
Advising companies in critical infrastructures on information security and compliance with the IT Security Act
Building SIEM/SOC processes and SOC analyst work (Splunk, ELK-Stack)
Integrating data into monitoring tools (Prometheus, Grafana)
Consulting on BSI IT baseline protection, ISO 9001, ISO 27001, BCM, ITIL and risk management
Security assessments and penetration testing of IT and network architectures
Henryk O.
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Markus W.
Last position:
KRITIS Consultant at Oil Company
- Preparing an oil company for KRITIS auditing
- KRITIS consulting
- Creating necessary policies, processes, and guidelines in line with KRITIS requirements
- Tools and methodologies used: ISO/IEC 27001, BSI IT Baseline Protection, KRITIS-V
Discover over 15,000 top freelancers
Statistics of experts using BSI IT-Grundschutz
Aggregated from the professional profiles of matched freelancers.
Experience
30 years (Germany: 24 years)
Position duration
2.3 years (Germany: 2.5 years)
Positions per freelancer
27 (Germany: 17)
Top business areas
Information Technology, Product Development, Project Management
Top industries
Professional Services, Information Technology, Media and Entertainment
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
83% (Germany: 85%)
Master's degree or higher
67% (Germany: 54%)
Doctorate
17% (Germany: 8%)
Certifications per freelancer
13 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
100% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Berlin using BSI IT-Grundschutz
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
BSI IT-Grundschutz experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Professional Services (100%)
- Information Technology (88%)
- Media and Entertainment (75%)
- Education (63%)
- Manufacturing (63%)
- Telecommunication (63%)
- Automotive (50%)
- Energy (50%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What it covers
BSI IT-Grundschutz is the German Federal Office for Information Security framework for establishing and operating an information security management system. It combines organisational, personnel, technical and structural safeguards with a method for assessing risks and improving protection. The approach supports both public authorities and private organisations.
Standards and method
The framework is based on the BSI Standards 200-1, 200-2 and 200-3. Specialists translate the organisation’s scope, processes and information assets into a structured security concept, then select suitable requirements from the IT-Grundschutz Compendium. The method can support certification against ISO 27001 on the basis of IT-Grundschutz.
Typical deliverables
- Information security policies and governance structures
- Structural analysis, modelling and protection-needs assessments
- IT-Grundschutz security concepts and implementation plans
- Risk analyses for exceptional and high-impact scenarios
- Audit preparation, evidence packages and corrective actions
Professionals may also define roles, maintain security documentation, coordinate business continuity measures and establish processes for handling incidents, suppliers and changes.
Tools and adjacent skills
Strong specialists work with the IT-Grundschutz Compendium and BSI methodology, while connecting them to ISO 27001, risk management and data protection requirements. Useful adjacent skills include network and endpoint security, identity and access management, cloud governance, vulnerability management, business continuity and security awareness. Clear documentation is essential because controls must be traceable and maintainable.
When companies engage specialists
Companies often bring in freelance expertise when they are creating an information security management system, expanding into regulated operations or preparing for an assessment. Common signals include incomplete asset inventories, unclear responsibilities, outdated security concepts or audit findings that lack owners. In Berlin, specialists may collaborate remotely with distributed teams or work on site for workshops, interviews and evidence reviews.
What good work looks like
A capable professional adapts the methodology to the organisation instead of producing generic templates. They connect protection needs to business processes, explain decisions in language that management and technical teams can use, and keep requirements proportionate. Look for experience with the relevant BSI Standards, strong interview and documentation skills, practical control implementation and a clear way to verify that safeguards work in daily operations.
Frequently asked questions
Curious about BSI IT-Grundschutz? Here are the answers that come up again and again.
BSI IT-Grundschutz is used to establish, operate and improve an information security management system. It helps organisations model their processes and assets, assess protection needs, select safeguards and prepare structured evidence for reviews or certification.
BSI IT-Grundschutz provides a detailed German methodology with practical requirements in the IT-Grundschutz Compendium. ISO 27001 defines requirements for an information security management system at an international level, while certification against ISO 27001 can also be based on an IT-Grundschutz assessment.
A strong BSI IT-Grundschutz specialist usually understands ISO 27001, risk management, data protection, business continuity and audit preparation. Depending on the scope, experience with cloud security, identity management, networks, endpoint protection and supplier assessments is also valuable.
The right level depends on the assignment. A focused documentation or protection-needs assessment may suit a specialist with experience in that work, while a full ISMS implementation, certification preparation or complex risk analysis calls for someone who has led comparable BSI IT-Grundschutz programmes.
BSI IT-Grundschutz work can often be completed remotely through interviews, document reviews and collaborative workshops. On-site sessions in Berlin can still be useful for validating facilities, understanding operational processes and involving teams that handle sensitive information.
Companies often engage a BSI IT-Grundschutz expert when internal security responsibilities are unclear, an ISMS needs to be introduced or audit findings require rapid remediation. Freelance support is also useful during organisational change, cloud adoption or preparation for an external assessment.
Ask the BSI IT-Grundschutz professional to explain how they connect business processes, protection needs, safeguards and evidence. Good work is specific to the organisation, easy to maintain and clear about ownership, residual risk, implementation status and how controls will be checked.
The BSI IT-Grundschutz method is relevant to public authorities, critical service providers, healthcare organisations, financial institutions, manufacturers and companies handling sensitive business or personal data. Berlin-based teams may also value specialists who can work in German with local stakeholders while coordinating effectively in English.
The average hourly rate of freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects is 117 €, which corresponds to a daily rate of about 936 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects, 83% hold at least a Bachelor's degree, 67% hold at least a Master's degree, and 17% hold a doctorate.
On average, freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects have 30 years of professional experience, with a single engagement typically lasting around 2.3 years.
The most common languages among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are German (100%), English (100%), and French (25%).
The most common industries among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are Professional Services (100%), Information Technology (88%), and Media and Entertainment (75%).
The most common business areas among freelancers in Berlin, Germany who have used BSI IT-Grundschutz in their recent projects are Information Technology (100%), Product Development (75%), and Project Management (75%).
Main locations of FRATCH Experts, who have recently used BSI IT-Grundschutz
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Munich 
Cologne 
Frankfurt 
Dusseldorf 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
