DORA Experts in Düsseldorf
matched in minutes from over 15,000 CVsHire experts who interpret the Digital Operational Resilience Act, structure ICT risk controls and prepare testing and incident processes. FRATCH precisely matches you with vetted, available freelancers who fit your DORA requirements.
Meet FRATCH Experts in Düsseldorf, who have recently used DORA
Nikolaus B.
Last position:
Information Security, IS-Governance & Crossfunctional Governance at Zürich Beteiligungs-AG (Deutschland)
- Conducted security assessments for supplier qualification, business unit onboarding, and ongoing reviews of service providers and partners (Ongoing Assurance).
- Assessed technical and organizational measures (TOMs) against GDPR and information security requirements.
- Handled security reviews and approval processes in the Global Approval Navigator (OneTrust).
- Advised business units and IT on information security, security requirements, and risk-appropriate measures.
- Supported the development of SOC/SIEM processes and tools as part of the ISMS in line with ISO/IEC 27001.
- Analyzed cyber threats and coordinated security objectives and measures to address Security Findings with the SOC team.
- Monitored and assessed current security advisories and security-related metrics (KPIs).
- Reviewed, assessed risks, and approved exception requests (Security Exceptions).
- Independently analyzed and handled Security Events and supported the handling of security incidents.
- Planned and supported awareness initiatives to strengthen security awareness.
- Created, implemented, and reviewed information security policies and standards.
- Conducted protection needs analyses and gap assessments to identify security gaps and risk deviations.
- Defined and reviewed technical and organizational risk treatment measures.
- Advised on Third Party Governance with consideration of DORA, ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 42001, and BCM in line with ISO 22301.
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Frank D.
Last position:
Project Manager at TEAG Thüringer Energie AG
- Transition of Microsoft Azure operations to BTC AG
- Responsibility: Budget of 60k €
- Personnel: Managed 5 people
- Tools: Office 365, JIRA, Confluence
Natascha K.
Last position:
Business Analyst DORA and System Architecture at PSVaG
- DORA consulting and system optimization
- Process analysis of existing business processes that are complex from both a business and technical point of view
- Analysis of the individual business processes in the relevant business areas Trading, Back Office, Settlement, Custodian Bank
- Interface between the business units and IT to understand and define requirements
- Creation of a business concept incl. adjustments and implementation of software applications and their interfaces to the systems
- Preparation of a decision template for the management board for project approval
- Setting up and running project meetings with the relevant stakeholders and documenting them
- Close collaboration with the stakeholders
- Coordination and control of the analysis
- Creation and planning of resources and budget
- Onboarding of large banks (Asia and Eastern Europe) for Depot B
- Migration of portfolio holdings (volume around EUR 70-100 million)
Levent Ö.
Last position:
Senior Expert Transformation & Change Management at STC Services (Freelancer in cooperation)
- Developed an IT governance and oversight framework aligned with DORA requirements
- Coordinated and trained external service providers
- Optimized financial processes and performance
Arndt M.
Last position:
Project Manager for ServiceNow Vulnerability Response at Union Investment Services & IT GmbH
- Led the subproject for implementing Vulnerability Response as part of DORA
- Documented the current processes in compliance, risk & security
- Created the functional design for introducing application, infrastructure, and cloud vulnerabilities
- Agile management of the integration service provider, the technical department, and the company's cross-functional teams
- Integrated the V scanners Tenable, Qualys and Defender, as well as NVD and CISA/KEV
- Integrated GitLab Ultimate for importing and processing SBOMs
- Developed automation rules to match scan results with CIs in the CMDB, assign vulnerabilities and remediation tasks, handle approvals (false positives, exceptions) and closures
- Calculated multiple risk scores and priorities
- Defined dashboards and reports (Workspaces, Performance Analytics)
- Aligned the new processes, especially to improve the CMDB data quality (according to CSDM)
Dennis S.
Last position:
Third Party Risk Management at Ergo Group
- Processing entries in the Third Party Risk Management (TPRM) process
- Conducting clean-ups of existing business relationships
- Creating, processing, and documenting requests
- Reviewing entries from process participants based on existing files
- Collaborating with risk SMEs (Subject Matter Experts) and vendor contacts
- Working closely with procurement, information security, and data protection to align business requirements
- Implementing regulatory requirements (VAIT, DORA) and ensuring compliance and risk management
Bernhard D.
Last position:
Enterprise Architect. And responsible for the cross-functional architecture as well as all domains with a focus on the sales at Süddeutsche Krankenversicherung
Creation of business and technical concepts as well as support for enterprise architecture management as part of the migration to the Adesso standard insurance solutions and the renewal of surrounding systems
Interface definitions
Business analysis and creation of the business concepts for input management and sales
Creation of architecture guidelines and processes
Processing technical and business decisions in the architecture board
Definition of service processes and system management aspects
Creation of the technical target operating model
Creation of an integration architecture for AI/LLMs from the providers Commasoft and Insiders
CommaSoft (Alan) webpages and web services
Insiders for Smartfix based on web services
Creation of a question catalog for a security/regulatory check.
Analysis of threats using threat modeling / STRIDE incl. creation of a set of measures to secure the systems
System environment: Jira, Confluence, Java, Enterprise Architect, VAIT/DORA, KritisV, GDPR, IT ServiceMgmt, Adesso Ecosphere and Insure Health, DoPIX and successor product, SmartFix, SmartFlow, Zabas, Kolumbus, Clarc archive, BiPRO, AI / LLM, MS Azure, AWS, TOM/FMO
Michael M.
Last position:
Team Lead / Service Owner 2nd Level & ITIL at Creditreform
- Service owner of the receivables management platform Ikarus
- Management and coordination of external 1st-level service providers
- Team leadership and building ITIL-compliant support structures
- Managing the handover to 3rd-level support (internal & external, incl. vendor/development)
- Stakeholder management between the business unit, IT, and external partners
- Jira ticket automations and maintenance of Confluence documentation
Heinz-Dieter L.
Last position:
Consultant at CH Crypto Group
- Advice on governance and information security topics: BAIT, MaRisk
- Creating governance documents (policies, guidelines)
- Developing emergency manuals
- Based on BSI IT baseline protection standard 200-4 and ISO2700x
Discover over 15,000 top freelancers
Statistics of experts using DORA
Aggregated from the professional profiles of matched freelancers.
Experience
30 years (Germany: 22 years)
Position duration
1.5 years (Germany: 2.3 years)
Positions per freelancer
20 (Germany: 16)
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Insurance, Banking and Finance
Certification focus areas
Information Technology, Project Management, Quality Assurance
Bachelor's degree or higher
67% (Germany: 89%)
Master's degree or higher
22% (Germany: 61%)
Certifications per freelancer
11 (Germany: 7)
Most common languages
German, English, Spanish
Speak two or more languages
90% (Germany: 98%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Düsseldorf are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Düsseldorf using DORA
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
DORA experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Insurance (90%)
- Banking and Finance (80%)
- Energy (70%)
- Manufacturing (60%)
- Professional Services (50%)
- Government and Administration (50%)
- Healthcare (40%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
What DORA covers
DORA, the Digital Operational Resilience Act, is an EU framework for the digital operational resilience of financial entities. It addresses ICT risk management, incident reporting, resilience testing and oversight of critical technology providers. The regulation turns technology resilience into a documented management responsibility.
Where it applies
DORA affects banks, insurers, investment firms, payment providers and other covered financial entities. It also shapes relationships with ICT suppliers that support important business services. Companies operating in Düsseldorf may need to coordinate legal, risk, security and technology teams across Germany and the wider EU.
Core workstreams
- Map ICT services, assets, dependencies and important business functions
- Define governance, risk controls and third-party oversight
- Prepare processes for detecting, managing and reporting ICT incidents
- Plan resilience testing, including scenario-based assessments
- Maintain evidence, registers, policies and management reporting
Ecosystem and skills
DORA work connects regulatory interpretation with information security, enterprise risk and service management. Specialists may use GRC platforms, CMDBs, ticketing systems, SIEM tools and cloud inventories to collect evidence and track controls. Familiarity with ISO 27001, NIS2, business continuity, outsourcing governance and data protection is often valuable, while DORA remains the specific regulatory focus.
When companies hire specialists
Companies bring in freelance DORA expertise when they need an independent readiness review, a practical implementation plan or additional capacity before an audit or regulatory review. Specialists can help when ownership is unclear, supplier records are incomplete, incident procedures are untested or evidence is spread across departments. They also support remediation after control gaps are identified.
What strong professionals deliver
Strong DORA professionals translate legal requirements into controls that teams can operate and prove. They ask precise questions about critical services, recovery priorities, supplier concentration and escalation paths. Their deliverables are clear, traceable and usable: risk assessments, ICT registers, testing plans, incident playbooks, third-party assessments and concise reports for management. They communicate effectively with both technical and non-technical stakeholders.
Frequently asked questions
Key details about DORA, drawn from the questions we get asked most.
DORA is used to establish consistent digital operational resilience requirements for financial entities and their ICT service relationships. It covers ICT risk management, major incident reporting, resilience testing and oversight of critical third-party technology providers.
DORA is a sector-specific EU regulation for financial services, with detailed requirements for ICT risk, incidents, testing and third-party oversight. ISO 27001 is a certifiable information security management standard, while NIS2 has a broader cybersecurity scope across essential and important sectors. They can support DORA controls but do not replace it.
A strong DORA specialist often combines regulatory analysis with ICT risk management, information security, business continuity and supplier governance. Experience with GRC tooling, cloud services, incident response, CMDB data and ISO 27001 can make the work more practical and easier to evidence.
The right level depends on the scope, regulatory status and maturity of the organisation. A readiness assessment may need a specialist who can quickly map requirements and identify gaps, while implementation across several entities requires proven programme coordination, control design and stakeholder management. Relevant financial-services experience is usually more useful than familiarity with DORA terminology alone.
Much of DORA work can be completed remotely through document reviews, workshops and evidence analysis. On-site sessions can help when teams need to map critical services, validate operational processes or resolve ownership questions. For companies in Düsseldorf, clear German and English communication may be important when local teams and international group functions are involved.
A DORA freelancer may deliver an ICT risk assessment, service and asset register, control framework, incident reporting process, resilience testing plan and third-party oversight model. The documents should identify owners, evidence, dependencies and remediation actions rather than simply restate regulatory text.
Ask the specialist to explain how a requirement becomes an operating control, who owns it and what evidence would demonstrate it. Review examples of risk mappings, testing scenarios, incident playbooks or supplier assessments, with confidential details removed. Good professionals distinguish regulatory obligations from sensible supporting practices and highlight unresolved assumptions.
Working with DORA requires careful handling of confidential risk, supplier and incident information. Freelancers should be comfortable navigating legal, risk, security and technology stakeholders, documenting decisions and challenging incomplete evidence. They also need to keep the regulatory interpretation current and adapt deliverables to the client’s supervisory context.
The average hourly rate of freelancers in Dusseldorf, Germany who have used DORA in their recent projects is 104 €, which corresponds to a daily rate of about 835 € based on an 8-hour working day.
Of the freelancers in Dusseldorf, Germany who have used DORA in their recent projects, 67% hold at least a Bachelor's degree and 22% hold at least a Master's degree.
On average, freelancers in Dusseldorf, Germany who have used DORA in their recent projects have 30 years of professional experience, with a single engagement typically lasting around 1.5 years.
The most common languages among freelancers in Dusseldorf, Germany who have used DORA in their recent projects are German (100%), English (90%), and Spanish (30%).
The most common industries among freelancers in Dusseldorf, Germany who have used DORA in their recent projects are Information Technology (100%), Insurance (90%), and Banking and Finance (80%).
The most common business areas among freelancers in Dusseldorf, Germany who have used DORA in their recent projects are Information Technology (100%), Project Management (100%), and Operations (90%).
Main locations of FRATCH Experts, who have recently used DORA
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Cologne 
Frankfurt 
Essen Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
