DORA Experts in Vienna
matched in minutes by AIHire experts who translate the Digital Operational Resilience Act into practical ICT risk controls, incident processes and third-party oversight. FRATCH connects you with vetted, available freelancers whose experience fits your regulatory and operational needs.
Meet FRATCH Experts in Vienna, who have recently used DORA
Michael P.
Last position:
Independent IT Consultant at Vamico GmbH
- Provided targeted consulting and support on IT delivery and integration topics.
- Designed, implemented and operated own software products (Rendita, vailuate) independently: requirements, architecture, testing, releases and ongoing development, implemented with AI support.
- Ongoing learning in AI, mainly through hands-on work with LLMs: API integration, agentic workflows with automated evaluation, Model Context Protocol; supported academically through the MSc study program in AI Transformation.
Alexander P.
Last position:
Owner & Lecturer at Artellico / Own company for AI governance and data products
- Consulting and interim management at the intersection of IT operations and regulation
- Impact assessment and implementation planning for NISG 2026 and the EU AI Act, including risk management and reporting and evidence processes
- Training for governing bodies and employees on regulatory obligations
- Teaching assignments in Data & Information Management and Human-Machine Interaction at Hochschule Burgenland, since 2023
- Supervision of Master's theses and participation on examination boards
- Industry talks for businesses and educational institutions
- Design and development of data and AI products, platforms and pipelines
- Privacy-first architectures and Zero-Knowledge encryption, cloud-native on EU infrastructure
- Integration with bank account systems using SEPA direct debit mandates and message formats under ISO 20022 (pain.008, camt.053)
- MLOps and AIOps in live operations
- Own applications under my own brand: shared codebase, separate deployment for each target device
- AI-assisted software development (vibe-coding), complete agentic pipelines, code generation, implementation, automated testing, CI/CD and release cycles
- Professional publications on the EU AI Act, NIS2, DORA, CRA and CER as an integrated governance system
- Professional publications on data sovereignty, cloud economics and industrial image processing
- AI governance / compliance: data quality, Responsible AI, EU AI Act readiness, risk classification, AI ethics
Plamen M.
Last position:
Head of Service & Operations Management at Raiffeisen Bank International
- Shaping service management framework as part of head office of RBI
- Service owner overseeing IT cloud services, accountable for overall quality, lifecycle, and success
- Managing customer relationships and satisfaction for 10 business units ensuring smooth business continuity and operations
- Single point of contact and service/process owner providing T-shaped expertise in IT domains, cloud platforms and services (AWS, Azure, Kubernetes, Salesforce, ServiceNow, Jira, Orca, CRM, GitHub, SFMC)
- ITSM/ITIL implementation and mentoring including design, definition, mapping, and execution
- Change and release management, UAT/test assurance, major incident management, SDLC management
- Managing regulatory and audit requirements, DORA, GDPR, ITPF compliance and reporting
- Acting as a point of escalation for complex customer issues, resolving conflicts, fostering a customer-centric culture
- People management: leading and managing service delivery teams, DevOps, vendors, and third-party teams
- Cross-tribe service delivery and contract management: KPIs, SLAs, OLAs, RPO, RTO, BCM/SCM management
- Agile/Scrum process delivery governance, stakeholder communication, and budget/cost management
Zoran J.
Last position:
Technical Writer – Implementation of the BNPP IT PROD SEC Service Catalog at BNP Paribas Germany
Design, authorship and finalization of the IT PROD SEC service catalog with eight standardized security services (S-ID001–S-ID008).
Development of consistent service components & deliverables, RACI assignments and SLA and KPI definitions for each service.
Integration of BaFin document requirements under DORA into the service descriptions.
Coordination with IT, compliance, risk and operations teams to validate all service descriptions.
Specifically for governance & monitoring: definition of governance cadence, evidence delivery processes, audit support and definition of measurable KPIs and measurement methods.
Ensuring that all services are standardized, measurable and documented in an audit-proof manner.
Result: Approved service catalog with eight services as a binding basis for delivery, governance and audits; transparent SLAs/KPIs for each service and DORA/BAIT/MaRisk-compliant documentation with clear responsibilities and evidence trails.
Technologies and tools: Confluence, Jira, ServiceNow, Microsoft PowerPoint, Microsoft Visio, Office 365.
Hans-Michael M.
Last position:
Project expert, digitalization and strategic consulting at Freelance Consultant
- Project work in IT, banking, insurance and strategy
- Risk management consulting for companies in various industries
Peter K.
Last position:
Sabbatical
Discover over 15,000 top freelancers
Statistics of experts using DORA
Aggregated from the professional profiles of matched freelancers.
Experience
28 years
Position duration
1.7 years
Positions per freelancer
15
Top business areas
Information Technology, Project Management, Business Intelligence
Top industries
Banking and Finance, Information Technology, Insurance
Certification focus areas
Project Management, Information Technology, Business Intelligence
Bachelor's degree or higher
100%
Master's degree or higher
100%
Certifications per freelancer
8
Most common languages
German, English, Russian
Speak two or more languages
100%
Based on our profile pool as of 5 Nov 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Vienna are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Vienna using DORA
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 5 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
DORA experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Banking and Finance (100%)
- Information Technology (83%)
- Insurance (67%)
- Professional Services (67%)
- Government and Administration (50%)
- Automotive (33%)
- Manufacturing (33%)
- Media and Entertainment (33%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
DORA in practice
DORA, the Digital Operational Resilience Act, sets requirements for digital operational resilience across financial entities and critical ICT providers in the European Union. It covers ICT risk management, incident reporting, resilience testing, information sharing and oversight of important third parties. Companies use DORA programmes to turn regulatory expectations into documented, repeatable controls.
Core workstreams
DORA expertise spans governance, technology and operational processes. Specialists commonly deliver:
- ICT risk management frameworks and control libraries
- Major ICT incident classification and reporting processes
- Resilience testing, including threat-led penetration testing planning
- Third-party risk assessments and contractual control requirements
- Evidence packs for management, internal audit and supervisory review
Ecosystem and skills
DORA work connects regulatory interpretation with security, risk and technology operations. Relevant skills include GRC tooling, security monitoring, business continuity, disaster recovery, cloud governance, identity management and vendor management. Strong specialists understand how policies map to systems, owners, controls and evidence rather than treating compliance as a documentation exercise.
When to bring in experts
Companies often engage freelance DORA specialists during implementation, remediation or major technology change. They can help when control ownership is unclear, ICT inventories are incomplete, incident workflows are untested or supplier contracts need review. In Vienna, financial institutions and technology businesses may also need someone who can coordinate effectively with local teams and international stakeholders.
Deliverables that matter
A focused engagement may produce an ICT risk framework, service and asset register, incident playbooks, resilience test plans, supplier assessment templates or a management reporting pack. The right scope depends on the company’s size, services, technology estate and existing control maturity. Remote collaboration works well for analysis and documentation; workshops may benefit from on-site sessions in Vienna.
What strong specialists bring
Experienced DORA professionals connect legal requirements to operational reality. They ask how services fail, who responds, which dependencies matter and what evidence proves that controls work. They communicate clearly with risk, security, legal, procurement and engineering teams, challenge weak assumptions and leave behind processes that teams can operate after the engagement ends.
Frequently asked questions
Questions about DORA? Start with the answers below.
DORA is used to strengthen digital operational resilience in financial services and across the ICT providers that support them. It establishes expectations for ICT risk management, incident handling, resilience testing, information sharing and third-party oversight.
DORA is broader than a typical cybersecurity programme. It connects security controls with business continuity, operational risk, incident reporting, resilience testing and oversight of ICT suppliers, with clear accountability for financial entities.
A strong DORA specialist often combines ICT risk, information security, business continuity and third-party risk skills. Experience with GRC tools, cloud environments, incident response, audit evidence and contract controls is also valuable.
Clarify whether the engagement covers gap assessment, implementation, testing, supplier oversight or remediation. A specialist working with DORA will also need access to the ICT asset inventory, policies, incident records, supplier information and relevant control owners.
The required depth depends on the scope and complexity of the organisation. A focused policy review may need a different profile from a programme spanning critical services, cloud providers, incident reporting and resilience testing. Look for proven delivery in DORA work or closely related ICT risk and financial-sector regulation.
Much of the analysis, documentation and stakeholder coordination can be completed remotely. For organisations in Vienna, on-site workshops can still help with control ownership, service mapping and executive alignment, especially when several local teams are involved.
Ask for examples of concrete deliverables and how they were adopted by operational teams. A capable DORA specialist can explain the link between a requirement, a control, its owner, the supporting technology and the evidence used to test it.
Typical outputs include an ICT risk framework, control catalogue, incident classification process, resilience test plan, supplier assessment model or management reporting pack. A freelancer specialising in DORA should tailor these deliverables to the organisation’s services, dependencies, risk appetite and existing governance.
The average hourly rate of freelancers in Vienna, Austria who have used DORA in their recent projects is 115 €, which corresponds to a daily rate of about 920 € based on an 8-hour working day.
Of the freelancers in Vienna, Austria who have used DORA in their recent projects, 100% hold at least a Bachelor's degree and 100% hold at least a Master's degree.
On average, freelancers in Vienna, Austria who have used DORA in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 1.7 years.
The most common languages among freelancers in Vienna, Austria who have used DORA in their recent projects are German (100%), English (100%), and Russian (33%).
The most common industries among freelancers in Vienna, Austria who have used DORA in their recent projects are Banking and Finance (100%), Information Technology (83%), and Insurance (67%).
The most common business areas among freelancers in Vienna, Austria who have used DORA in their recent projects are Information Technology (100%), Project Management (100%), and Business Intelligence (67%).
Main locations of FRATCH Experts, who have recently used DORA
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Countries:
Vienna 
Graz Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
