DORA Experts in Berlin
in minutes from over 15,000 CVs with the power of AIHire experts who turn DORA requirements into clear controls, audit-ready documentation, and incident response processes for financial services, fintech, and ICT risk teams. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Berlin, who have recently used DORA
Piet Quade
Last position:
IT Project Manager at no release
Industry: Publishing, media Project management for the concept of a RAG-based archive access solution: a secure on-prem or hybrid compute architecture for LLM and embedding operations, pipeline for transcription and automatic tagging, semantic search across audio and video archives. Use case evaluation and make-or-buy together with editorial team, archive, and legal department, taking into account copyright, broadcasting law, and the AI Act. Differentiator: practical LLM infrastructure experience from two own productive platforms combined with C-level program management in regulated industries.
Flamur Abdyli
Last position:
Fractional Chief Information Security Officer at VR Smart Guide GmbH
- Enhance and develop the Information Security Management System (ISMS) in compliance with ISO 27001 and TISAX standards by continuously updating and refining the ISMS to align with evolving global standards.
- Ensure that security practices and policies are integrated into all business processes to achieve and maintain certifications.
- Lead the effort to identify, evaluate and mitigate risks across the organization, setting benchmarks for security measures.
- Oversee and refine security processes, with an emphasis on incident management and rapid response by developing and enforcing policies for rapid detection, investigation and remediation of security incidents.
- Train and lead the incident response team to handle breaches effectively, minimizing impact and ensuring swift recovery.
- Implement continuous monitoring solutions to detect and respond to threats in real time.
- Conduct comprehensive security assessments for internal and external IT projects, ensuring adherence to GDPR, DORA and other relevant standards.
- Oversee security evaluations for all IT projects to ensure they comply with legal and regulatory requirements.
- Integrate security measures from the planning phase through deployment to ensure all projects uphold the organization’s security standards.
- Collaborate with project teams to address findings and ensure that security risks are managed effectively.
- Serve as the principal security advisor to the IT department and senior management, offering insights on potential security challenges.
- Facilitate a culture of security awareness throughout the organization through training and regular communication.
- Lead security initiatives that align with the organization’s long-term strategic goals.
- Establish and oversee a robust third-party risk management framework to mitigate external security threats by regularly assessing third-party security practices and compliance and developing contingency plans and mitigation strategies.
- Provide regular updates and security briefings to the executive leadership and relevant committees, highlighting recent security incidents, responses, lessons learned and recommending strategic improvements.
Sebastian Striebig
Last position:
Group Product Manager – Digital Platform Discovery at SPREAD.AI
- Developed and implemented organization-wide discovery framework based on Ulwick’s Outcome-Driven Innovation; enabled 7 Product Owners to systematically identify and quantify unrealized value through shared outcome language and opportunity scoring methodology
- Transformed Product Owner role from backlog clerks to strategic experimenters; established dedicated time budget for autonomous hypothesis testing and discovery activities
- Rebuilt customer journey maps to start at actual user need (tool selection phase) instead of platform entry point; eliminated manual data aggregation work previously done by project teams
- Implemented OKR framework across 4 product teams; defined quarterly objectives with measurable key results (e.g., 40% reduction in manual integration effort, self-service adoption increase)
- Unified 3 separate platform roadmaps through cross-team dependency mapping and shared service agreements
- Supported enterprise sales cycle with ROI modeling and technical due diligence for automotive and defense customers
Daniel Suszczynski
Last position:
Engineering Leader & AI-Assisted Developer at Independent · Building with AI
- Building a full-stack e-commerce product using AI-assisted development, deliberately returning to hands-on engineering to validate how AI changes software development workflows and team dynamics.
- Exploring VP Technology, Head of Engineering, and Director of Engineering opportunities where hands-on AI experience meets organisational scaling expertise.
- Open to advisory conversations on AI-augmented engineering teams, technology strategy, platform architecture, and organizational design.
- No registered business. No commercial activity.
Peter Merz
Last position:
Managing Partner without operational duties at pt plus GmbH & Co. KG
- full-service marketing agency for global technology companies
Damir Harbas
Last position:
Founder and Senior Advisor at Harbas & Company
- Advisory for Bank-Verlag GmbH on establishing a risk management and compliance function by defining the DORA strategy, conducting a DORA gap analysis and developing all DORA-relevant policies, supporting the design and roll out of the risk management framework, and providing overall PMO support for all DORA-relevant streams
- Ensured the conceptual and operational setup of a Cyber Defence Center for Vienna Insurance Group AG, including the implementation of regulatory requirements, development of the organizational, tax, and financial structure, including up- & downstream cost allocation model, DORA compliance, outsourcing, data protection, and works council requirements, gap analysis for contracts with regard to DORA, EIOPA, Solvency II and best practices and creation of policies in line with DORA
- Definition of an IT security target operating model for Oldenburgische Landesbank, including definition of processes, responsibilities and interfaces for a new, DORA-compliant IT security operations area that can be integrated into the existing IT organization and that is to be established or expanded
- Implementation of a service management readiness and maturity analysis according to ITIL for Ottobock Group, definition of an ITSM target operating model including processes, organization and governance, and derivation of measures to close identified gaps
- Developed an overarching cloud strategy for the corporate segment of ThyssenKrupp AG, involving all business units and stakeholders while considering business unit specific requirements
- Conducted an IT benchmark for a business unit of ThyssenKrupp AG, including structural analysis of the organizational structure and IT strategy
- Introduced a company-wide business continuity management system for Krieger Group, including identification and assessment of potential crisis scenarios and risks, and establishment of structures
- Developed an S/4HANA transformation strategy for Pfalzwerke AG, including a transformation plan and preliminary project
- Developed a restructuring strategy for Pfalzwerke AG, including the future IT delivery model, transformation plans, and business cases for each scenario
- Conducted an IT cost review for AMS-OSRAM AG, including analysis and optimization of IT costs and budget, as well as planning and implementing a strategy to reduce IT costs.
Jurgen Wiehan
Last position:
Director of Engineering at Wunderflats
- Reporting directly to the CEO.
- Responsible for all things in the engineering space including software engineering, architecture and quality assurance.
- Led a team of around 25 cross functional team members including frontend, backend and fullstack engineers.
- Aligned engineering strategies with organisation strategy through clearly identifiable OKRs.
- Introduced Team Topologies and Scrum, ensuring less hand-offs between teams and improving their efficiencies which resulted in more impactful solutions for our customers.
- Lead the technology due diligence process for an M&A decision.
- Spearheaded the re-architecture of our product from monolith to microservices, reducing technical debt and enabling expansion into new markets.
- Managed a budget of around €2m, optimising costs by introducing SaaS solutions and replacing homegrown systems.
- Negotiated vendor contracts, reducing costs by at least 10% and improving service delivery.
- Set clear expectations and goals for engineers ensuring their continued growth within the organisation.
- Technology stacks included React, Node.js, MongoDB and GCP.
Mateusz Pychynski
Last position:
IT Project Manager at Universal Investment
- Led infrastructure and security integration project for Private Equity acquisition, reducing security vulnerabilities through streamlined governance.
- Restructured resource allocation for strategic projects, enhancing governance through automated tracking and reporting to executive stakeholders.
Henryk Orantek
Last position:
Security Consultant at Daimler AG
- Development of a cloud security strategy
- Implementation of cloud security governance to comply with ISO/IEC 27017 and the CSA CCM
- Creation of a management system to control cloud security with a focus on process design as well as roles and responsibilities
- Definition of security measures to safeguard cloud solutions
- Conducting requirements analyses and defining the scope for cloud security projects
- Achievements: Established an effective NIS2-compliant cloud security governance that meets industry-specific requirements and effectively minimizes cloud security risks
Roman Deputat
Last position:
CTO at EFS
- Introduced a serverless/event-driven platform, boosting deployment frequency from 3 to 40 per month
- Implemented an LLM-based fraud-detection proof of concept that flagged 92 % of suspicious transactions
- Built performance and DORA metrics dashboards adopted by the C-suite
Nicholus Muwonge
Last position:
Founding Software Engineer at Trakrf
- Built out backend services in Golang, TimeScaleDB, and GCP, handling 10K+ reads concurrently.
- Migrated from RedPanda to a local service written in Golang, reducing latency and business cost.
- Added A/B testing using Open Replay to analyze customer behavior along with performance.
- Collaborated with marketing and firmware teams to successfully launch the MVP on time to pitch to potential customers.
- Streamlined testing and deployments by creating GitHub Actions to check for failing tests and lint errors, and deploying both staging and production releases efficiently.
Markus Willems
Last position:
KRITIS Consultant at Oil Company
- Preparing an oil company for KRITIS auditing
- KRITIS consulting
- Creating necessary policies, processes, and guidelines in line with KRITIS requirements
- Tools and methodologies used: ISO/IEC 27001, BSI IT Baseline Protection, KRITIS-V
Benjamin Quecke
Last position:
Transformation Advisor and Overall Program Manager at Vereinigte Hagelversicherung VVaG
- Transformation management for the renewal of core insurance systems
- Overall management of the transformation program with 10 projects and many subprojects
- Advising the management board
- Designing the new insurance processes
- Ensuring compliance with DORA, GDPR and BaFin
- Program management (multi-project management) based on PMI principles
- Continuous coordination with all service providers and internal stakeholders
- Reporting to all stakeholders
- Preparing and running steering committees
- Detailed task and resource planning
- Tracking effort and budget as well as forecasting
- Decision and escalation management
- Managing the different program phases such as solution design phase, agile implementation phase, test phase, training phase and migration phase
- Building 15 cloud environments in redundant data centers
- Preparing iterative rollouts to European countries
Discover over 15,000 top freelancers
Statistics of experts using DORA
Aggregated from the professional profiles of matched freelancers.
Experience
23 years (Germany: 21 years)
Position duration
2.3 years
Positions per freelancer
16 (Germany: 15)
Top business areas
Information Technology, Project Management, Strategy
Top industries
Information Technology, Banking and Finance, Professional Services
Certification focus areas
Information Technology, Project Management, Audit
Bachelor's degree or higher
92% (Germany: 87%)
Master's degree or higher
83% (Germany: 58%)
Certifications per freelancer
7
Most common languages
English, German, Polish
Speak two or more languages
100% (Germany: 96%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using DORA
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
DORA basics
DORA is the EU Digital Operational Resilience Act. It sets rules for how financial firms manage ICT risk, recover from disruption, and prove resilience under pressure. Teams also search for DORA compliance or the Digital Operational Resilience Act when they need the right specialist.
What experts deliver
- ICT risk assessments and control reviews
- Incident response plans and reporting workflows
- Resilience testing, backup, and recovery checks
- Third-party and cloud risk oversight
- Policies, evidence packs, and audit support
Where it fits
DORA matters for banks, insurers, asset managers, payment firms, and fintech companies that depend on stable digital services. In Berlin, it often touches product, security, risk, legal, and operations teams working together on regulated systems and supplier oversight.
Skills that matter
Strong professionals know both regulation and technical reality. They understand ICT governance, control mapping, business continuity, logging, testing, and vendor management. They can translate DORA into actions teams can follow without creating heavy process for its own sake.
When to bring help
Bring in freelance expertise when DORA work is stalled, when an internal review exposes gaps, or when an audit asks for clearer proof. Companies also use specialists for remediation projects, policy updates, supplier assessments, and preparing for supervisory questions.
What good looks like
Good DORA experts write in plain language, spot missing controls quickly, and focus on evidence that stands up to review. They know how to work with security, compliance, and business owners, and they keep the scope tied to the actual risk in your environment.
Frequently asked questions
Key details about DORA, drawn from the questions we get asked most.
DORA is the EU Digital Operational Resilience Act. It requires financial firms to show they can prevent, withstand, and recover from ICT disruptions. In practice, that means clearer controls, better incident handling, and stronger oversight of critical suppliers.
DORA is the regulation itself; DORA compliance is the work of meeting its requirements. Companies use that phrase when they need gap assessments, policy updates, control mapping, and evidence for audits or supervisory reviews.
A strong DORA specialist typically works on risk frameworks, incident reporting processes, business continuity, resilience testing, and third-party oversight. They may also help write policies, map controls to requirements, and prepare documentation for internal or external review.
DORA is specific to financial services and focuses on operational resilience for ICT risk. ISO 27001 is a broader information security standard, while NIS2 covers cybersecurity obligations across more sectors. Many firms use all three, but the scope and evidence needs are different.
A useful DORA expert often brings ICT risk, business continuity, incident response, vendor risk, and governance skills. Familiarity with cloud services, audit evidence, and security controls also helps when the work touches modern financial systems.
A DORA project can be small or complex depending on how many systems and suppliers are in scope. A focused gap assessment may only need one specialist, while remediation across risk, operations, and vendors usually benefits from someone who has worked on regulated environments before.
Yes, most DORA work can be done remotely, especially assessments, documentation, and control design. On-site time in Berlin can still help when teams need workshops, stakeholder interviews, or review sessions with risk and security leads.
Look for a DORA freelancer who can explain requirements clearly, turn them into concrete actions, and show examples of audit-ready work. Strong candidates also ask smart questions about your services, suppliers, and incident processes instead of giving generic compliance advice.
The average hourly rate of freelancers in Berlin, Germany who have used DORA in their recent projects is 128 €, which corresponds to a daily rate of about 1,023 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used DORA in their recent projects, 92% hold at least a Bachelor's degree and 83% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used DORA in their recent projects have 23 years of professional experience, with a single engagement typically lasting around 2.3 years.
The most common languages among freelancers in Berlin, Germany who have used DORA in their recent projects are English (100%), German (92%), and Polish (15%).
The most common industries among freelancers in Berlin, Germany who have used DORA in their recent projects are Information Technology (92%), Banking and Finance (77%), and Professional Services (62%).
The most common business areas among freelancers in Berlin, Germany who have used DORA in their recent projects are Information Technology (100%), Project Management (85%), and Strategy (77%).
Main locations of FRATCH Experts, who have recently used DORA
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg 
Cologne 
Frankfurt 
Dusseldorf 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
