BSI IT-Grundschutz Experts in Dusseldorf
matched in minutes with the power of AIWork with specialists who build information security management systems, align IT architectures with BSI standards, and prepare audits, matched rapidly from vetted, available freelancers.
Meet FRATCH Experts in Dusseldorf, who have recently used BSI IT-Grundschutz
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Rudolf E.
Last position:
Datacenter Engineer, Network & Security Administrator at International Insurance Group
Operation and further development of the network and security infrastructure.
Monitoring, analysis and resolution of network and security incidents.
Cross-departmental collaboration with other teams on operations and further development, and reporting.
Firewall vulnerability analysis.
Firewall access requests.
Troubleshooting IP communication issues on network and firewall infrastructure.
Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.
Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5
Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW.  Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account  Ensuring end-to-end control of all IAM-related technical services  Establishing clear responsibilities and accountabilities across the IAM landscape  Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security  Introducing and monitoring governance policies to ensure compliance and security  Continuously improving IAM processes and systems through regular audits and service reviews  Taking part in external process audits as part of official audits against ISO standards  Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments  Conceptually developing the KPI system for measuring process quality
Olaf R.
Last position:
DevOps Architect / Consultant at Authority with increased security requirements
- Identification of requirements (legal, organizational, and technical)
- Design of solution architectures
- Evaluation of concepts and technologies
- Preparation of decision templates
- Architectural Decision Records (ADR)
- Coordination of implementation
- Review of implementations
- Documentation
Wolfgang S.
Last position:
CIO / CDO / Project Manager AI Academy / Auditor of Operational Processes / Product Owner MS365 at F&P Executive Solutions AG
- Digitalization of accounting, signature/approval, and onboarding processes
- Restructuring of the IT department
- Introduction of a digital sales tool
- Implementation of an AI webinar series
- Introduction and optimization of information security
- Administration and optimization of the MS Office 365 environment
Ralph K.
Last position:
Product Owner / Business Owner at AXIS Management Consulting GmbH
- Full product responsibility from a business perspective: requirement analysis, UX design, product strategy, and go-to-market implemented without an internal dev team using fully AI-supported development (Claude Code / Anthropic)
- Technical differentiation: KRITIS-compliant air-gapped deployment (Windows/NSIS), GDT interface for PVS integration, DATEV-LODAS export for payroll
- Managed pilot operation with initial external client (Dormagen medical practice): structured requirement gathering, test support, error analysis, and release management
- Developed rollout and sales strategy for market entry in the segment of private practices and small medical centers
- Human-in-the-Loop development principle: business decision → AI implementation → manual review → approval → release – each sprint documented in Jira (TIME project), every change traceable via co-authored commits
- Product outcome: Tauri/Rust desktop app with GDT watcher, multi-tier model (Starter/Professional/Enterprise), cloud mirror on Hetzner/Traefik, complete ISMS framework based on ISO 27001 and BSI basic protection as product foundation
- Direct method validation for the test manager role: hands-on experience with quality assurance of AI-generated products from a user perspective, review gate discipline, release approval under GDPR and the EU AI Act
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Heinz-Dieter L.
Last position:
Consultant at CH Crypto Group
- Advice on governance and information security topics: BAIT, MaRisk
- Creating governance documents (policies, guidelines)
- Developing emergency manuals
- Based on BSI IT baseline protection standard 200-4 and ISO2700x
Holger G.
Last position:
IT at Holger Grittner Consulting
Discover over 15,000 top freelancers
Statistics of experts using BSI IT-Grundschutz
Aggregated from the professional profiles of matched freelancers.
Experience
28 years (Germany: 24 years)
Position duration
2.1 years (Germany: 2.5 years)
Positions per freelancer
23 (Germany: 17)
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Healthcare, Banking and Finance
Certification focus areas
Information Technology, Quality Assurance, Project Management
Bachelor's degree or higher
50% (Germany: 85%)
Master's degree or higher
17% (Germany: 54%)
Certifications per freelancer
12 (Germany: 8)
Most common languages
German, English, Spanish
Speak two or more languages
78% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Dusseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Dusseldorf using BSI IT-Grundschutz
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
BSI IT-Grundschutz experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Healthcare (89%)
- Banking and Finance (67%)
- Government and Administration (67%)
- Insurance (56%)
- Energy (44%)
- Manufacturing (44%)
- Professional Services (44%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Standardized Information Security via BSI Standards
BSI IT-Grundschutz provides a systematic methodology for establishing an Information Security Management System (ISMS). Developed by the German Federal Office for Information Security, it combines structural analysis, protection requirements modeling, and standardized security measures across infrastructure, applications, and organizational workflows.
Core Framework and Methodology Components
The methodology relies on fundamental building blocks defined in key BSI standards:
- BSI Standard 200-1 defining general ISMS requirements
- BSI Standard 200-2 establishing IT-Grundschutz methodology and implementation approaches
- BSI Standard 200-3 guiding risk analysis for elevated protection needs
- IT-Grundschutz-Kompendium containing procedural and technical modules
Tooling and Documentation Ecosystem
Implementing the framework requires structured documentation and continuous tracking across operational environments. Professionals rely on specialized tooling such as verinice, HiScout, and customized GRC platforms to maintain IT asset inventories, map module requirements, and manage audit-ready evidence for certification checks.
Local Industry Context Across Dusseldorf
Dusseldorf hosts international corporate headquarters, energy providers, telecommunications firms, and state administration bodies. Many of these organizations qualify as critical infrastructure operators or public-sector suppliers, making rigorous alignment with federal security frameworks essential for contractual and statutory compliance.
Primary Project Triggers for Freelance Support
Organizations engage external specialists during specific compliance and security milestones:
- Baseline audits and gap analyses against updated compendium releases
- Preparation for formal ISO 27001 certification based on IT-Grundschutz
- Security concept development for public-sector and enterprise tenders
- Structuring risk treatment plans for systems handling sensitive data
Hallmarks of Seasoned Grundschutz Specialists
Strong professionals combine deep familiarity with federal baseline standards with pragmatic technical insight. They navigate complex organizational structures, communicate fluently in German technical and administrative terminology, and translate abstract security safeguards into concrete engineering tasks for local operational teams.
Frequently asked questions
Everything clients usually want to know about BSI IT-Grundschutz, in one place.
BSI IT-Grundschutz serves as a structured blueprint for establishing, operating, and auditing an Information Security Management System. Organizations use it to identify protection needs, apply pre-defined security measures, and systematically mitigate vulnerabilities across technical infrastructure, operational personnel, and physical environments.
While international ISO/IEC 27001 outlines broad organizational requirements, the IT-Grundschutz framework provides detailed, actionable implementation modules through the IT-Grundschutz-Kompendium. Organizations often pursue ISO 27001 certification based on IT-Grundschutz to demonstrate both international compliance and rigorous technical safeguards.
Specialists working with BSI IT-Grundschutz typically use dedicated ISMS management platforms such as verinice or HiScout. These tools streamline structural analysis, module assignment, gap documentation, and reporting for internal stakeholders and external certifiers.
Much of the documentation, policy authoring, and gap analysis for IT-Grundschutz can be completed remotely. However, physical site reviews, initial stakeholder workshops, and preparation for on-site audits in Dusseldorf often benefit from regional specialists who can easily visit local corporate offices or data facilities.
Official documentation, federal compendiums, and audit evidence for BSI IT-Grundschutz are predominantly maintained in German. For companies in Dusseldorf, hiring a professional fluent in German ensures clear alignment with local auditors, compliance officers, and administrative bodies.
Look for credentials such as IT-Grundschutz-Praktiker or IT-Grundschutz-Berater accredited under BSI guidelines. A qualified expert should demonstrate practical experience guiding organizations through the entire lifecycle from structural analysis to successful certification audits.
An effective rollout of BSI IT-Grundschutz requires familiarity with data protection standards such as GDPR, network architecture, cloud security, and business continuity management. Experts frequently collaborate with enterprise system administrators, devops teams, and legal counsels.
Deploying an ISMS aligned with IT-Grundschutz usually spans several months, depending on organizational scope and system complexity. Engaging an experienced external specialist helps organizations avoid common documentation bottlenecks and accelerate audit readiness.
The average hourly rate of freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects is 111 €, which corresponds to a daily rate of about 885 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects, 50% hold at least a Bachelor's degree and 17% hold at least a Master's degree.
On average, freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 2.1 years.
The most common languages among freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects are German (100%), English (78%), and Spanish (22%).
The most common industries among freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects are Information Technology (100%), Healthcare (89%), and Banking and Finance (67%).
The most common business areas among freelancers in Dusseldorf, Germany who have used BSI IT-Grundschutz in their recent projects are Information Technology (100%), Operations (89%), and Project Management (89%).
Main locations of FRATCH Experts, who have recently used BSI IT-Grundschutz
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Munich 
Cologne 
Frankfurt 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
